----- E:/Train/makePDF/v1\tap-token-main\contracts/twAML.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


abstract contract FullMath { 
// https://xn--2-umb.com/21/muldiv/ 
function muldiv( 
uint256 a, 
uint256 b, 
uint256 denominator 
) internal pure returns (uint256 result) { 
// Handle division by zero 


require(denominator > 0); 


//512-bit multiply [prod1 prod0] = a * b 
// Compute the product mod 2**256 and mod 2**256 - 1 
// then use the Chinese Remainder Theorem to reconstruct 
// the 512 bit result. The result is stored in two 256 
// variables such that product = prod1 * 2**256 + prodO 
uint256 prodO; // Least significant 256 bits of the product 
uint256 prod1; // Most significant 256 bits of the product 
assembly { 

let mm := mulmod(a, b, not(0)) 


prodO := mul(a, b) 


prod1 := sub(sub(mm, prodO), It(mm, prodO)) 


// Short circuit 256 by 256 division 
// This saves gas when a * b is small, at the cost of making the 
// large case a bit more expensive. Depending on your use case you 
// may want to remove this short circuit and always go through the 
// 512 bit path. 
if (prodl == 0) { 

assembly { 

result := div(prod0, denominator) 
} 


return result; 


LMM 
// 512 by 256 division. 


MUTT 


// Handle overflow, the result must be < 2**256 


require(prodl < denominator); 


// Make division exact by subtracting the remainder from [prod1 prod0] 
// Compute remainder using mulmod 

// Note mulmod(_,_, 0) == 0 
uint256 remainder; 
assembly { 


remainder := mulmod(a, b, denominator) 


} 


// Subtract 256 bit number from 512 bit number 
assembly { 


prod1 := sub(prod1, gt(remainder, prodO)) 


prodO := sub(prod0O, remainder) 


// Factor powers of two out of denominator 

// Compute largest power of two divisor of denominator. 

// Always >= 1 unless denominator is zero, then twos is zero. 
uint256 twos = denominator & (~denominator + 1); 

// Divide denominator by power of two 

assembly { 


denominator := div(denominator, twos) 


// Divide [prod1 prodO] by the factors of two 
assembly { 
prodO := div(prodO, twos) 
} 
// Shift in bits from prod1 into prodO. For this we need 
// to flip “twos” such that it is 2**256 / twos. 
// \f twos is zero, then it becomes one 
assembly { 


twos := add(div(sub(0, twos), twos), 1) 


prodO |= prod1 * twos; 


// Invert denominator mod 2**256 

// Now that denominator is an odd number, it has an inverse 

// modulo 2**256 such that denominator * inv = 1 mod 2**256. 
// Compute the inverse by starting with a seed that is correct 
// correct for four bits. That is, denominator * inv = 1 mod 2**4 
// \f denominator is zero the inverse starts with 2 

uint256 inv = (3 * denominator) ^ 2; 

// Now use Newton-Raphson itteration to improve the precision. 
// Thanks to Hensel's lifting lemma, this also works in modular 
// arithmetic, doubling the correct bits in each step. 

inv *= 2 - denominator * inv; // inverse mod 2**8 

inv *= 2 - denominator * inv; // inverse mod 2**16 

inv *= 2 - denominator * inv; // inverse mod 2**32 

inv *= 2 - denominator * inv; // inverse mod 2**64 

inv *= 2 - denominator * inv; // inverse mod 2**128 

inv *= 2 - denominator * inv; // inverse mod 2**256 


// \f denominator is zero, inv is now 128 


// Because the division is now exact we can divide by multiplying 
// with the modular inverse of denominator. This will give us the 
// correct result modulo 2**256. Since the precoditions guarantee 
// that the outcome is less than 2**256, this is the final result. 

// We don't need to compute the high bits of the result and prod1 


// is no longer required. 


result = prodO * inv; 


return result; 


abstract contract TWAML is FullMath { 
/// @notice Compute the minimum weight to participate in the twAML voting mechanism 
/// @param _totalWeight The total weight of the twAML system 
/// @param _minWeightFactor The minimum weight factor in BPS 
function computeMinWeight( 
uint256 _totalWeight, 
uint256 _minWeightFactor 
) internal pure returns (uint256) { 
uint256 mul = (_totalWeight * _minWeightFactor); 


return mul >= 1e4 ? mul / 1e4 : _totalWeight; 


function computeMagnitude( 
uint256 _timeWeight, 
uint256 cumulative 
) internal pure returns (uint256) { 
return 
sqrt(_timeWeight * _timeWeight + cumulative * cumulative) - 


_cumulative; 


function computeTarget( 
uint256 _dMin, 
uint256 dMax, 
uint256 _magnitude, 
uint256 cumulative 
) internal pure returns (uint256) { 
if (cumulative == 0) { 
return _dMax; 
} 
uint256 target = (_magnitude *_dMax) / cumulative; 
target = target > _dMax ? dMax: target <_dMin? dMin: target; 


return target; 


// babylonian 


method 


(https://en.wikipedia.org/wiki/Methods of computing square _roots#Babylonian_method) 


function sqrt(uint256 y) internal pure returns (uint256 z) { 
if (y > 3) { 
z= y; 
uint256x=y/2 +1; 
while (x < z) { 
Z= X; 
x=(y/x+x)/2; 
l 
} else if (y != 0) { 


Z= 


----- E:/Train/makePDF/v1\tap-token-main\contracts/Vesting.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


import "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol"; 
import "@openzeppelin/contracts/security/ReentrancyGuard.sol"; 


import "@boringcrypto/boring-solidity/contracts/BoringOwnable.sol"; 


contract Vesting is BoringOwnable, ReentrancyGuard { 


using SafeERC20 for IERC20; 


/// @notice the vested token 


IERC20 public token; 


/// @notice returns the start time for vesting 


uint256 public start; 


/// @notice returns the cliff period 


uint256 public cliff; 


/// @notice returns total vesting duration 


uint256 public duration; 


/// @notice returns total available tokens 


uint256 public seeded = 0; 


/// @notice user vesting data 
struct UserData { 
uint256 amount; 
uint256 claimed; 
uint256 latestClaimTimestamp; 
bool revoked; 


} 


mapping(address => UserData) public users; 


uint256 private _totalAmount; 


uint256 private _totalClaimed; 


// *** ERRORS ** // 

error NotStarted(); 

error NothingToClaim(); 
error Initialized(); 

error AddressNotValid(); 
error AmountNotValid(); 
error AlreadyRegistered(); 
error NoTokens(); 


error NotEnough(); 


error BalanceTooLow(); 


error VestingDurationNotValid(); 


[1 ** EVENTS *** // 

/// @notice event emitted when a new user is registered 

event UserRegistered(address indexed user, uint256 amount); 
/// @notice event emitted when someone claims available tokens 


event Claimed(address indexed user, uint256 amount); 


/// @notice creates a new Vesting contract 

/// @param _cliff cliff period 

/// @param _duration vesting period 

constructor(uint256 cliff, uint256 duration, address owner) { 


if (duration == 0) revert VestingDurationNotValid(); 


cliff = _ cliff; 
duration = _duration; 


owner = _owner, 


// *** VIEW FUNCTIONS *** // 


/// @notice returns total claimable 


function claimable() external view returns (uint256) { 


return vested(seeded) - _totalClaimed; 


/// @notice returns total claimable for user 
/// @param _user the user address 
function claimable(address _user) public view returns (uint256) { 


return vested(users[_user].amount) - users[_user].claimed; 


/// @notice returns total vested amount 
function vested() external view returns (uint256) { 


return _vested(seeded); 


/// @notice returns total vested amount for user 
/// @param _user the user address 
function vested(address _user) external view returns (uint256) { 


return vested(users[_user].amount); 


/// @notice returns total claimed 
function totalClaimed() external view returns (uint256) { 


return _totalClaimed; 


// *** PUBLIC FUNCTIONS *** // 

/// @notice claim available tokens 

/// @dev claim works for msg.sender 

function claim() external nonReentrant { 
if (start == 0 || seeded == 0) revert NotStarted(); 
uint256 claimable = claimable(msg.sender); 


if (_claimable == 0) revert NothingToClaim(); 


_totalClaimed += _claimable; 
users[msg.sender].claimed += _claimable; 


users[msg.sender].latestClaimTimestamp = block.timestamp; 


token.safeTransfer(msg.sender, _claimable); 


emit Claimed(msg.sender, _claimable); 


// ** OWNER FUNCTIONS *** // 

| [ PR RRRR ERE. /7/ 

/// @notice adds a new user 

/// @dev should be called before init 
/// @param _user the user address 
/// @param _amount user weight 


function registerUser(address user, uint256 amount) external onlyOwner { 


if (start > 0) revert Initialized(); 
if (user == address(0)) revert AddressNotValid(); 
if (amount == 0) revert AmountNotValid(); 


if (users[_user].amount > 0) revert AlreadyRegistered(); 


UserData memory data; 
data.amount = _amount; 
data.claimed = 0; 

data.revoked = false; 
data.latestClaimTimestamp = 0; 


users[_user] = data; 


_totalAmount += _amount; 


emit UserRegistered(_user, amount); 


/// @notice inits the contract with total amount 

/// @dev sets the start time to block.timestamp 

/// @param _seededAmount total vested amount 

function init(IERC20 token, uint256 seededAmount) external onlyOwner { 
if (Start > 0) revert Initialized(); 
if (_ seededAmount == 0) revert NoTokens(); 


if ( totalAmount > _seededAmount) revert NotEnough(); 


token = _token; 


uint256 availableToken = _token.balanceOf(address(this)); 


if (availableToken < seededAmount) revert BalanceTooLow(); 


seeded = seededAmount; 


start = block.timestamp; 


// *** PRIVATE FUNCTIONS *** // 
function vested(uint256_ total) private view returns (uint256) { 
if (start == 0) return 0; 
uint256 total = total; 
if (block.timestamp < start + cliff) return 0; 
if (block.timestamp >= start + duration) return total; 


return (total * (block.timestamp - start)) / duration; 


----- E:/Train/makePDF/v1\tap-token-main\contracts\governance/twTAP.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity 0.8.18; 


import {ICommonOFT} from "tapioca-sdk/dist/contracts/token/oft/v2/ICommonOFT.sol"; 
import {ONFT721} from "tapioca-sdk/src/contracts/token/onft/ONFT721.sol"; 

import "@openzeppelin/contracts/security/ReentrancyGuard.sol"; 

import "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol"; 

import "@openzeppelin/contracts/token/ERC20/ERC20.sol"; 

import "tapioca-sdk/dist/contracts/util/ERC4494.sol"; 

import "../tokens/TapOFT.sol"; 


import "../twAML.sol"; 
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// justification for data sizes: 

// - 56 bits can represent over 2 billion years in seconds 

// - TAP has a maximum supply of 100 million, and a precision of 10*18. Any 
// amount will therefore fit in (lg 10*26 = 87) bits. 

// - The multiplier has a maximum of 1 million; (MAX = 100 * 1e4, which fits 

//_ in 20 bits. 

// - A week is 86400 * 7 = 604800 seconds; less than 2^20. Even if we start 

// counting at the (Unix) epoch, we will run out of “expiry” before we 

// saturate the week fields. 


struct Participation { 


uint256 averageMagnitude; 

bool hasVotingPower; 

bool divergenceForce; // 0 negative, 1 positive 

bool tapReleased; // allow restaking while rewards may still accumulate 
uint56 expiry; // expiry timestamp. Big enough for over 2 billion years.. 
uint88 tapAmount; // amount of TAP locked 

uint24 multiplier; // Votes = multiplier * tapAmount 

uint40 lastInactive; // One week BEFORE the staker gets a share of rewards 


uint40 lastActive; // Last week that the staker shares in rewards 


struct TWAMLPool { 
uint256 totalParticipants; 
uint256 averageMagnitude; 
uint256 totalDeposited; 


uint256 cumulative; 


struct WeekTotals { 
// For [0..currentWeek] this is a cumulative total: it consists of the 
// active votes in the previous week, minus the votes known to expire this 
// week. For future weeks, it is a negative number corresponding to the 
// expiring votes. 
int256 netActiveVotes; 
// rewardTokens index -> amount 


mapping(uint256 => uint256) totalDistPerVote; 


contract TWTAP is TWAML, ONFT721, ERC721Permit, ReentrancyGuard { 


using SafeERC20 for IERC20; 


TapOFT public immutable tapOFT; 


TWAMLPool public twAML; // sglAssetld => twAMLPool 


mapping(uint256 => Participation) public participants; // tokenld => part. 


uint256 constant MIN_WEIGHT_FACTOR = 10; // In BPS, 0.1% 
uint256 constant (MAX = 100 * 1e4; // 10% - 100% voting power multiplier 
uint256 constant dMIN = 10 * 1e4; 


uint256 public constant EPOCH DURATION = 7 days; 


// If we assume 128 bit balances for the reward token -- which fit 1e40 

// "tokens" at the most commonly used 1e18 precision -- then we can use the 
// other 128 bits to store the tokens allotted to a single vote more 

// accurately. Votes in turn are proportional to the amount of TAP locked, 

// weighted by a multiplier. This number is at most 107 bits long (see 

// definition of “Participation” struct). 

// the weight ranges from 10-100% where 1% = 1e4, so 1 million (20 bits). 

// the multiplier is at most 100% = 1M (20 bits), so votes is at most a 


// 107-bit number. 


uint256 constant DIST PRECISION = 2 ** 128; 


IERC20[] public rewardTokens; 
mapping(IERC20 => uint256) public rewardTokenIndex; 
// tokenld -> rewardTokens index -> amount 


mapping(uint256 => mapping(uint256 => uint256)) public claimed; 


// The current week is determined by creation, but there are values that 
// need to be updated weekly. If, for any reason whatsoever, this cannot 
// be done in time, the *lastProcessedWeek’ will be behind until this is 
// done. 

uint256 public mintedTWTap; 

uint256 public creation; // Week 0 starts here 

uint256 public lastProcessedWeek; 


mapping(uint256 => WeekTotals) public weekTotals; 


uint256 public immutable HOST _CHAIN_ID; 


string private baseURI; 


constructor( 
address payable tapOFT, 
address owner, 
address _layerZeroEndpoint, 
uint256 _hostChainlD, 


uint256 _minGas 


ONFT721("Time Weighted TAP", "twTAP", minGas, layerZeroEndpoint) 


ERC721Permit("Time Weighted TAP") 


tapOFT = TapOFT(_tapOFT); 
transferOwnership(_owner); 
creation = block.timestamp; 


HOST _CHAIN_ID = _hostChainlD; 


event Participate( 
address indexed participant, 
uint256 tapAmount, 
uint256 multiplier 

); 

event AMLDivergence( 
uint256 cumulative, 
uint256 averageMagnitude, 
uint256 totalParticipants 

); 


event ExitPosition(uint256 indexed tokenld, uint256 amount); 


function currentWeek() public view returns (uint256) { 


return (block.timestamp - creation) / EROCH_DURATION; 


/// @notice Return the participation of a token. Returns O votes for expired tokens. 
function getParticipation( 

uint tokenld 
) public view returns (Participation memory participant) { 

participant = participants[_tokenld]; 

if (participant.expiry <= block.timestamp) { 

participant.multiplier = 0; 
} 


return participant; 


/// @notice Amount currently claimable for each reward token 
function claimable( 

uint256 _tokenld 
) public view returns (uint256[] memory) { 

uint256 len = rewardTokens.length; 


uint256[] memory result = new uint256[](len); 


Participation memory position = participants[_tokenld]; 


uint256 votes; 
unchecked { 
// Math is safe: Types fit 


votes = uint256(position.tapbAmount) * uint256(position.multiplier); 


} 

if (votes == 0) { 
return result; 

} 


// If the "last processed week" is behind the actual week, rewards 
// get processed as if it were earlier. 
uint256 week = lastProcessedWeek; 
if (week <= position.lastInactive) { 
return result; 
} 
if (position.lastActive < week) { 


week = position.lastActive; 


WeekTotals storage cur = weekTotals[week]; 


WeekTotals storage prev = weekTotals[position.lastInactive]; 


for (uint256 i = 0; i < len; ) { 
// Math is safe (but we do the checks anyway): 


// 


// -- The ‘totalDistPerVote[i]’ values are increasing as a 

// function of weeks (see ‘advanceWeek()’), and if `week` 
// were not greater than *position.lastInactive’, this bit 

//_ of code would not be reached (see above). Therefore the 
//_ subtraction in the calculation of `net` cannot underflow. 
II 

// -- “votes * net’ is at most the entire reward amount given 
// out, ever, in units of 

// 

// (reward tokens) * DIST PRECISION. 

// 

//_\f this number were to exceed 256 bits, then 

//_ ~distributeReward’ would revert. 

II 

// -- `claimed[_tokenlid][i] is the sum of all (the i-th values 
//_ of) previous calls to the current function that were made 
//_ by ~_claimRewards()*. Let there be n such calls, and let 
// rj be ‘result[i]’, c_j be ~claimed[_tokenld][i]>, and 

[| net_j be `net` during that j-th call. Then, up to a 


// multiplication by votes / DIST PRECISION: 


// c1=0 <=net_l, 


// and, forn>1: 


// c n=r_ (n-1)+ r (n-2)+..+r1 


// 


r_(n-1) + c_(n-1) 


// = (net_(n-1) - c_(n-1) + c_(n-1) 
// = net_(n-1) 

// <= net_n, 

// 


//_ so that the subtraction net_n - c_n does not underflow. 

// (The rounding the calculation favors the greater first 

// term). 

// (TODO: Word better?) 

// 

uint256 net = cur.totalDistPerVote[i] - prev.totalDistPerVote[i]; 
result[i] = ((votes * net) / DIST_PRECISION) - claimed[_tokenld][i]; 
unchecked { 


++i; 


} 


return result; 


/// @notice Participate in twAMI voting and mint an oTAP position 
/// @param _participant The address of the participant 


/// @param _amount The amount of TAP to participate with 


/// @param _duration The duration of the lock 
function participate( 

address _participant, 

uint256 amount, 

uint256 duration 
) external returns (uint256 tokenld) { 


require(_duration >= EPOCH_DURATION, "twTAP: Lock not a week"); 


// Transfer TAP to this contract 


tapOFT.transferFrom(msg.sender, address(this), amount); 


// Copy to memory 


TWAMLPool memory pool = twAML; 


uint256 magnitude = computeMagnitude(_duration, pool.cumulative); 
bool divergenceForce; 
uint256 multiplier = computeTarget( 

dMIN, 

dMAX, 

magnitude, 


pool.cumulative 


// Calculate twAML voting weight 
bool hasVotingPower = _amount >= 


computeMinWeight(pool.totalDeposited, MIN. WEIGHT FACTOR); 


if (nhasVotingPower) { 
pool.totalParticipants++; // Save participation 
pool.averageMagnitude = 
(pool.averageMagnitude + magnitude) / 


pool.totalParticipants; // compute new average magnitude 


// Compute and save new cumulative 


divergenceForce = duration > pool.cumulative; 


if (divergenceForce) { 
pool.cumulative += pool.averageMagnitude; 
} else { 
// TODO: Strongly suspect this is never less. Prove it. 
if (pool.cumulative > pool.averageMagnitude) { 
pool.cumulative -= pool.averageMagnitude; 
} else { 


pool.cumulative = 0; 


// Save new weight 


pool.totalDeposited += amount; 


twAML = pool; // Save twAML participation 
emit AMLDivergence( 


pool.cumulative, 


pool.averageMagnitude, 


pool.totalParticipants 


// Mint twTAP position 
tokenld = ++mintedTWTap; 


_safeMint(_participant, tokenld); 


uint256 expiry = block.timestamp + _duration; 

require(expiry < type(uint56).max, "twTAP: too long"); 

// Eligibility starts NEXT week, and lasts until the week that the lock 
// expires. This is guaranteed to be at least one week later by the 

// check on `_duration`. 

// \f a user locks right before the current week ends, and have a 

// duration slightly over one week, straddling the two starting points, 
// then that user is eligible for the rewards during both weeks; the 
// price for this maneuver is a lower multiplier, and loss of voting 

// power in the DAO after the lock expires. 

uint256 w0 = currentWeek(); 


uint256 w1 = (expiry - creation) / EROCH DURATION; 


// Save twAML participation 
// Casts are safe: see struct definition 
uint256 votes = amount * multiplier; 


participants[tokenld] = Participation({ 


averageMagnitude: pool.averageMagnitude, 
hasVotingPower: hasVotingPower, 
divergenceForce: divergenceForce, 
tapReleased: false, 

expiry: uint56(expiry), 

tapAmount: uint88(_amount), 

multiplier: uint24(multiplier), 

lastInactive: uint40(w0), 


lastActive: uint40(w1) 


//w0O + 1 = lastinactive + 1 = first active 

//w1 + 1 = lastActive + 1 = first inactive 

// Cast is safe: `votes` is the product of a uint88 and a uint24 
weekTotals[wO + 1].netActiveVotes += int256(votes); 


weekTotals[wl + 1].netActiveVotes -= int256(votes); 


emit Participate(_participant, amount, multiplier); 


// TODO: Mint event? 


/// @notice claims all rewards distributed since token mint or last claim. 
/// @param _tokenld tokenld whose rewards to claim 

/// @param _to address to receive the rewards 

function claimRewards(uint256 tokenld, address to) external { 


_requireClaimPermission(_to, tokenld); 


_claimRewards(_tokenld, _to); 


/// @notice claims all rewards distributed since token mint or last claim, and send them to 
another chain. 
/// @param _tokenld The tokenld of the twTAP position 
/// @param _rewardTokens The address of the reward token 
function claimAndSendRewards( 
uint256 _tokenld, 
IERC20[] memory _rewardTokens 
) external { 
require(msg.sender == address(tapOFT), "twTAP: only tapOFT"); 


_claimRewardsOn(_tokenld, address(tapOFT), _rewardTokens); 


/// @notice claims the TAP locked in a position whose votes have expired, 

/// @notice and undoes the effect on the twAML calculations. 

/// @param _tokenld tokenld whose locked TAP to claim 

/// @param _to address to receive the TAP 

function releaseTap(uint256 tokenld, address to) external { 
_requireClaimPermission(_to, tokenld); 


_releaseTap(_tokenld, to); 


/// @notice Exit a twAML participation and delete the voting power if existing 


/// @param _tokenld The tokenld of the twTAP position 


function exitPosition(uint256 tokenld) external { 
address to = ownerOf(_tokenld); 


_releaseTap(_tokenld, to); 


/// @notice Exit a twAML participation and send the withdrawn TAP to tapOFT to send it to 
another chain. 
/// @param _tokenld The tokenld of the twTAP position 
function exitPositionAndSendTap( 
uint256 _tokenld 
) external returns (uint256) { 
require(msg.sender == address(tapOFT), "twTAP: only tapOFT"); 


return releaseTap(_tokenld, address(tapOFT)); 


/// @notice Indicate that (a) week(s) have passed and update running totals 
/// @notice Reverts if called in week 0. Let it. 
/// @param _limit Maximum number of weeks to process in one call 
function advanceWeek(uint256 limit) public { 

// TODO: Make whole function unchecked 

uint256 cur = currentWeek(); 

uint256 week = lastProcessedWeek; 

uint256 goal = cur; 

unchecked { 

if (goal - week > _limit) { 


goal = week + limit; 


} 
uint256 len = rewardTokens.length; 
while (week < goal) { 
WeekTotals storage prev = weekTotals[week]; 
WeekTotals storage next = weekTotals[++week]; 
// TODO: Prove that math is safe 
next.netActiveVotes += prev.netActiveVotes; 
for (uint256 i = 0; i < len; ) { 
next.totalDistPerVote[i] += prev.totalDistPerVote[i]; 
unchecked { 


++i; 


} 


lastProcessedWeek = goal; 


/// @notice distributes a reward among all tokens, weighted by voting power 
/// @notice The reward gets allocated to all positions that have locked in 

/// @notice the current week. Fails, intentionally, if this number is zero. 

/// @notice Total rewards cannot exceed 2“128 tokens. 

/// @param _rewardTokenld index of the reward in `rewardTokens` 

/// @param _amount amount of reward token to distribute. 

function distributeReward( 


uint256 rewardTokenld, 


uint256 amount 
) external nonReentrant { 

require( 

lastProcessedWeek == currentWeek(), 

"twTAP: Advance week first" 
); 
WeekTotals storage totals = weekTotals[lastProcessedWeek]; 
IERC20 rewardToken = rewardTokens[_rewardTokenld]; 
// \f this is a DBZ then there are no positions to give the reward to. 
// Since reward eligibility starts in the week after locking, there is 
// no way to give out rewards THIS week. 
// Cast is safe: `netActiveVotes` is at most zero by construction of 
// weekly totals and the requirement that they are up to date. 
// TODO: Word this better 
totals.totalDistPerVote[_rewardTokenld] += 

(amount * DIST PRECISION) / 


uint256(totals.netActiveVotes); 


require(_amount > 0, "twTap: amount is 0"); 


rewardToken.safeTransferFrom(msg.sender, address(this), amount); 


// OWNER 


function addRewardToken(IERC20 token) external onlyOwner returns (uint256) { 
uint256 i = rewardTokens.length; 
rewardTokens.push(token); 


rewardTokenIndex[token] = i; 


return i; 
} 
// eames ome? Sonne, Paai aaan panik Pn ERE | Guus anat. SA. sonia 
// INTERNAL 
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// Mirrors the implementation of _isApprovedOrOwner, with the modification 
// that it is allowed if `_to` is the owner: 
function requireClaimPermission( 
address to, 
uint256 _tokenld 
) internal view { 
address tokenOwner = ownerOf(_tokenld); 
require( 
msg.sender == tokenOwner || 
_to == tokenOwner || 
isApprovedForAll(tokenOwner, msg.sender) || 
getApproved(_tokenld) == msg.sender, 


"twTAP: cannot claim" 


function claimRewards(uint256 tokenld, address to) internal { 
uint256[] memory amounts = claimable(_tokenld); 
uint256 len = amounts.length; 
unchecked { 
for (uint256 i = 0; i < len; ++i) { 
uint256 amount = amounts[i]; 
if (amount > 0) { 
// Math is safe: `amount` calculated safely in `claimable()` 
claimed[_tokenld][i] += amount; 


rewardTokens[i].safeTransfer(_to, amount); 


function _claimRewardsOn( 
uint256 _tokenld, 
address to, 
IERC20[] memory _rewardTokens 
) internal { 
uint256[] memory amounts = claimable(_tokenld); 
unchecked { 
uint256 len = _rewardTokens.length; 
for (uint256 i = 0; i < len; ) { 


uint256 claimablelndex = rewardTokenIndex[_rewardTokens[i]]; 


uint256 amount = amounts[i]; 


if (amount > 0) { 
// Math is safe: `amount` calculated safely in `claimable()` 
claimed[_tokenld][claimablelndex] += amount; 


rewardTokens[claimablelndex].safeTransfer(_to, amount); 


++i; 


function releaseTap( 
uint256 _tokenld, 
address to 
) internal returns (uint256 releasedAmount) { 
Participation memory position = participants[_tokenld]; 
if (position.tapReleased) { 
return 0; 


} 


require(position.expiry <= block.timestamp, "twTAP: Lock not expired"); 


releasedAmount = position.tapAmount; 


// Remove participation 


if (position.hasVotingPower) { 


TWAMLPool memory pool = twAML; 


pool.totalParticipants--; 


// Inverse of the participation. The participation entry tracks 
// the average magnitude as it was at the time the participant 
// entered. When going the other way around, this value matches the 
// one in the pool, but here it does not. 
if (position.divergenceForce) { 
if (pool.cumulative > position.averageMagnitude) { 
pool.cumulative -= position.averageMagnitude; 
} else { 
pool.cumulative = 0; 
} 
} else { 


pool.cumulative += position.averageMagnitude; 


// Save new weight 


pool.totalDeposited -= position.tapAmount; 


twAML = pool; // Save twAML exit 

emit AMLDivergence( 
pool.cumulative, 
pool.averageMagnitude, 
pool.totalParticipants 


); // Register new voting power event 


participants[_tokenld].tapReleased = true; 


tapOFT.transfer(_to, releasedAmount); 


emit ExitPosition(_tokenld, releasedAmount); 


/// @dev Returns the chain ID of the current network 
function _getChainld() internal view virtual returns (uint256) { 
uint256 chainld; 
assembly { 
chainld := chainid() 
} 


return chainld; 


[** 
* @dev See {IERC165-supportsInterface}. 
gi 
function supportsInterface( 
bytes4 interfaceld 
) public view virtual override(ONFT721, ERC721) returns (bool) { 


return super.supportsIinterface(interfaceld); 


----- E:/Train/makePDF/v1\tap-token-main\contracts\option-airdrop/AirdropBroker.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


import "@openzeppelin/contracts/security/ReentrancyGuard.sol"; 
import "@openzeppelin/contracts/utils/cryptography/MerkleProof.sol"; 
import "@boringcrypto/boring-solidity/contracts/BoringOwnable.sol"; 
import "@openzeppelin/contracts/token/ERC20/ERC20.sol"; 

import "@openzeppelin/contracts/token/ERC20/IERC20.sol"; 

import "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol"; 
import "@openzeppelin/contracts/security/Pausable.sol"; 

import "tapioca-periph/contracts/interfaces/lOracle.sol"; 

import "../tokens/TapOFT.sol"; 

import "../twAML.sol"; 


import "./aoTAP.sol"; 
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struct PaymentTokenOracle { 
lOracle oracle; 


bytes oracleData; 


struct Phase2Info { 


uint8[4] amountsPerUsers; 


uint8[4] discountsPerUsers; 


/// @notice More details found here https://docs.tapioca.xyz/tapioca/launch/option-airdrop 
contract AirdropBroker is Pausable, BoringOwnable, FullMath, ReentrancyGuard { 


using SafeERC20 for IERC20; 


bytes public tapOracleData; 
TapOFT public immutable tapOFT; 
AOTAP public immutable aoTAP; 
lOracle public tapOracle; 


IERC721 public immutable PCNFT; 


uintl28 public epochTAPValuation; // TAP price for the current epoch 
uint64 public lastEpochUpdate; // timestamp of the last epoch update 


uint64 public epoch; // Represents the number of weeks since the start of the contract 


mapping(ERC20 => PaymentTokenOracle) public paymentTokens; // Token address => 


PaymentTokenOracle 


address public paymentTokenBeneficiary; // Where to collect the payment tokens 


mapping(uint256 => mapping(uint256 => uint256)) public aolTAPCalls; // oTAPTokenID 


=> epoch => amountExercised 


/// @notice Record of participation in phase 2 airdrop 


/// Only applicable for phase 2. To get subphases on phase 2 we do 
userParticipation[_user][20+roles] 
mapping(address => mapping(uint256 => bool)) public userParticipation; // user address 


=> phase => participated 


/// @notice user address => eligible TAP amount, 0 means no eligibility 
mapping(address => uint256) public phaselUsers; 


uint256 public constant PHASE 1 DISCOUNT = 50 * 1e4; // 50% 


III Phase 2 


// [OG Pearls, Sushi Frens, Tapiocans, Oysters, Cassava] 
bytes32[4] public phase2MerkleRoots; // merkle root of phase 2 airdrop 
uint8[4] public PHASE_2_AMOUNT_PER_USER = [200, 190, 200, 190]; 


uint8[4] public PHASE_2_DISCOUNT_PER_USER = [50, 40, 40, 33]; 


III Phase 3 


uint256 public constant PHASE_3 AMOUNT _PER_USER = 714; 


uint256 public constant PHASE 3 DISCOUNT = 50 * 1e4; 


/// @notice user address => eligible TAP amount, 0 means no eligibility 
mapping(address => uint256) public phase4Users; 


uint256 public constant PHASE 4 DISCOUNT = 33 * 1e4; 


uint256 public constant EPOCH DURATION = 2 days; 


constructor( 
address aoTAP, 
address payable _tapOFT, 
address _pcnft, 
address paymentTokenBeneficiary, 


address owner 


paymentTokenBeneficiary = _paymentTokenBeneficiary; 
tapOFT = TapOFT(_tapOFT); 

aoTAP = AOTAP(_aoTAP); 

PCNFT = IERC721(_pcnft); 


owner = _owner, 


// EVENTS 


event Participate(uint256 indexed epoch, uint256 aoTAPTokenID); 
event ExerciseOption( 

uint256 indexed epoch, 

address indexed to, 

ERC20 indexed paymentToken, 

uint256 aoTapTokenlD, 

uint256 amount 
); 


event NewEpoch(uint256 indexed epoch, uint256 epochTAPValuation); 


event SetPaymentToken(ERC20 paymentToken, lOracle oracle, bytes oracleData); 


event SetTapOracle(lOracle oracle, bytes oracleData); 


/// @notice Returns the details of an OTC deal for a given oTAP token ID and a payment 
token. 
/// The oracle uses the last peeked value, and not the latest one, so the payment 


amount may be different. 


/// @param _aoTAPTokenlD The aoTAP token ID 
/// @param _paymentToken The payment token 
IIl @param _tapAmount The amount of TAP to be exchanged. If O it will use the full 
amount of TAP eligible for the deal 
/// @return eligibleTapAmount The amount of TAP eligible for the deal 
/// @return paymentTokenAmount The amount of payment tokens required for the deal 


/// @return tapbAmount The amount of TAP to be exchanged 


function getOTCDealDetails( 
uint256 aoTAPTokenlD, 
ERC20 paymentToken, 


uint256 tapAmount 


external 

view 

returns ( 
uint256 eligibleTapAmount, 
uint256 paymentTokenAmount, 


uint256 tapAmount 


// Load data 

(, AirdropTapOption memory aoTapOption) = aoTAP.attributes( 
_aoTAPToken!ID 

); 


require(aolapOption.expiry >= block.timestamp, "adb: Option expired"); 


uint256 cachedEpoch = epoch; 


PaymentTokenOracle memory paymentTokenOracle = paymentTokens[ 


_paymentToken 


// Check requirements 
require( 
paymentTokenOracle.oracle != lOracle(address(0)), 


"adb: Payment token not supported" 


eligibleTapAmount = aoTapOption.amount; 
eligibleTapAmount -= aoTAPCalls[_aoTAPTokenID][cachedEpoch]; // Subtract already 
exercised amount 


require(eligibleTapAmount >= _tapAmount, "adb: Too high"); 


tapAmount = tapAmount == 0 ? eligibleTapAmount : _tapAmount; 
require(tapAmount >= 1e18, "adb: Too low"); 
// Get TAP valuation 
uint256 otcAmountInUSD = tapAmount * epochTAPValuation; // Divided by TAP 
decimals 
// Get payment token valuation 
(, uint256 paymentTokenValuation) = paymentTokenOracle.oracle.peek( 


paymentTokenOracle.oracleData 


); 

// Get payment token amount 

paymentTokenAmount = _getDiscountedPaymentAmount( 
otcAmountinUSD, 
paymentTokenValuation, 
aoTapOption.discount, 


_paymentToken.decimals() 


/// @notice Participate in the airdrop 
/// @param _data The data to be used for the participation, varies by phases 
function participate( 
bytes calldata_ data 
) external returns (uint256 aoTAPTokenlD) { 
uint256 cachedEpoch = epoch; 
require(cachedEpoch > 0, "adb: Airdrop not started"); 


require(cachedEpoch <= 4, "adb: Airdrop ended"); 


// Phase 1 
if (cachedEpoch == 1) { 


aoTAPTokenlD = _participatePhasel(); 


} else if (cachedEpoch == 2) { 
aoTAPTokenlD = _participatePhase2(_data); // data = (uint256 role, bytes32[] 
_merkleProof) 
} else if (cachedEpoch == 3) { 
aoTAPTokenlID = _participatePhase3(_data); //_data = (uint256 _tokenID) 
} else if (cachedEpoch == 4) { 


aoTAPTokenlD = _participatePhase4(); 


emit Participate(cachedEpoch, aoTAPTokenID); 


/// @notice Exercise an aoTAP position 
/// @param _aoTAPTokenID tokenld of the aoTAP position, position must be active 
/// @param _paymentToken Address of the payment token to use, must be whitelisted 
/// @param _tapAmount Amount of TAP to exercise. If 0, the full amount is exercised 
function exerciseOption( 

uint256 aoTAPTokenlD, 

ERC20 paymentToken, 

uint256 tapAmount 
) external { 

// Load data 

(, AirdropTapOption memory aoTapOption) = aoTAP.attributes( 

_aoTAPTokenID 
); 


require(aolapOption.expiry >= block.timestamp, "adb: Option expired"); 


uint256 cachedEpoch = epoch; 


PaymentTokenOracle memory paymentTokenOracle = paymentTokens[ 


_paymentToken 


// Check requirements 

require( 
paymentTokenOracle.oracle != |Oracle(address(0)), 
"adb: Payment token not supported" 

); 

require( 
aoTAP.isApprovedOrOwner(msg.sender, aoTAPTokenID), 


"adb: Not approved or owner" 


// Get eligible OTC amount 


uint256 eligibleTapAmount = aoTapOption.amount; 
eligibleTapAmount -= aoTAPCalls[_aoTAPTokenID][cachedEpoch]; // Subtract already 
exercised amount 


require(eligibleTapAmount >= _tapAmount, "adb: Too high"); 


uint256 chosenAmount = _tapAmount == 0 ? eligibleTapAmount : _tapAmount; 


require(chosenAmount >= 1e18, "adb: Too low"); 


aoTAPCalls[_aoTAPTokenID][cachedEpoch] += chosenAmount; // Adds up exercised 


amount to current epoch 


// Finalize the deal 

_processOTCDeal( 
_paymentToken, 
paymentTokenOracle, 
chosenAmount, 


aoTapOption.discount 


emit ExerciseOption( 
cachedEpoch, 
msg.sender, 
_paymentToken, 
_aoTAPTokenlD, 


chosenAmount 


/// @notice Start a new epoch, extract TAP from the TapOFT contract, 
III emit it to the active singularities and get the price of TAP for the epoch. 
function newEpoch() external { 


require( 


block.timestamp >= lastEpochUpdate + EPOCH_DURATION, 


"adb: too soon" 


// Update epoch info 
lastEpochUpdate = uint64(block.timestamp); 


epoch++; 


// Get epoch TAP valuation 
(, uint256 epochTAPValuation) = tapOracle.get(tapOracleData); 
epochTAPValuation = uintl28(_epochTAPValuation); 


emit NewEpoch(epoch, epochTAPValuation); 


/// @notice Claim the Broker role of the aoTAP contract 
function aolAPBrokerClaim() external { 


aoTAP.brokerClaim(); 


/// @notice Set the TapOFT Oracle address and data 

/// @param _tapOracle The new TapOFT Oracle address 
/// @param _tapOracleData The new TapOFT Oracle data 
function setTapOracle( 


lOracle tapOracle, 


bytes calldata_tapOracleData 
) external onlyOwner { 
tapOracle = _tapOracle; 


tapOracleData = tapOracleData; 


emit SetTapOracle(_tapOracle, tapOracleData); 


function setPhase2MerkleRoots( 
bytes32[4] calldata_merkleRoots 
) external onlyOwner { 


phase2MerkleRoots = _merkleRoots; 


function registerUserForPhase( 
uint256 phase, 
address[] calldata users, 
uint256[] calldata amounts 
) external onlyOwner { 


require(_users.length == _amounts.length, "adb: invalid input"); 


if (_phase == 1) { 
for (uint256 i = 0; i < _users.length; i++) { 
phaselUsers[_users[i]] = _amounts[i]; 
} 
} else if (_ phase == 4) { 


for (uint256 i = 0; i < _users.length; i++) { 


phase4Users[_users[i]] = _amounts[i]; 


/// @notice Activate or deactivate a payment token 
/// @dev set the oracle to address(0) to deactivate, expect the same decimal precision as 
TAP oracle 
function setPaymentToken( 
ERC20 paymentToken, 
lOracle _oracle, 
bytes calldata oracleData 
) external onlyOwner { 
paymentTokens[_paymentToken].oracle = _oracle; 


paymentTokens[_paymentToken].oracleData = _oracleData; 


emit SetPaymentToken(_paymentToken, oracle, oracleData); 


/// @notice Set the payment token beneficiary 
/// @param _paymentTokenBeneficiary The new payment token beneficiary 
function setPaymentTokenBeneficiary( 
address paymentTokenBeneficiary 
) external onlyOwner { 


paymentTokenBeneficiary = _paymentTokenBeneficiary; 


/// @notice Collect the payment tokens from the OTC deals 
/// @param _paymentTokens The payment tokens to collect 
function collectPaymentTokens( 
address[] calldata_paymentTokens 
) external onlyOwner nonReentrant { 
require( 
paymentTokenBeneficiary != address(0), 
"adb: Payment token beneficiary not set" 
); 


uint256 len = _paymentTokens.length; 


unchecked { 
for (uint256 i = 0; i < len; ++i) { 
IERC20 paymentToken = IERC20(_paymentTokens[i]); 
paymentToken.safeTransfer( 
paymentTokenBeneficiary, 


paymentToken.balanceOf(address(this)) 


// INTERNAL 


/// @notice Participate in phase 1 of the Airdrop. LBP users are given aoTAP pro-rata. 
function _participatePhasel() internal returns (uint256 oTAPTokenlID) { 
uint256 _eligibleAmount = phaselUsers[msg.sender]; 


require(_eligibleAmount > 0, "adb: Not eligible"); 


// Close eligibility 


phaselUsers[msg.sender] = 0; 


// Mint aoTAP 
uintl28 expiry = uintl28(lastEpochUpdate + EPOCH DURATION); // Set expiry to the 


end of the epoch 
oTAPTokenID = aoTAP.mint( 
msg.sender, 
expiry, 
uintl28(PHASE 1 DISCOUNT), 


_eligibleAmount 


/// @notice Participate in phase 2 of the Airdrop. Guild members will receive pre-defined 


discounts and TAP, based on role. 
/// @param _data The calldata. Needs to be the address of the user. 


/// data = (uint256 role, bytes32[]_merkleProof). Refer to {phase2MerkleRoots} for role. 


function _participatePhase2( 


bytes calldata_ data 
) internal returns (uint256 oTAPTokenlD) { 
(uint256 role, bytes32[] memory _merkleProof) = abi.decode( 
_data, 


(uint256, bytes32[]) 


bytes32 leaf = keccak256(abi.encodePacked(msg.sender)); 
require( 
MerkleProof.verify(_merkleProof, phase2MerkleRoots[_role], leaf), 


"adb: Not eligible" 


uint256 subPhase = 20 + _role; 

require( 
userParticipation[msg.sender][subPhase] == false, 
"adb: Already participated" 

); 

// Close eligibility 


userParticipation[msg.sender][SubPhase] = true; 


// Mint aoTAP 
uintl28 expiry = uintl28(lastEpochUpdate + EPOCH DURATION); // Set expiry to the 
end of the epoch 
uint256 eligibleAmount = uint256(PHASE 2 AMOUNT PER _USER[_role]) * 1e18; 


uint128 discount = uintl28(PHASE 2 DISCOUNT _PER_USER[_role]) * 1e4; 


oTAPTokenID = aoTAP.mint(msg.sender, expiry, discount, eligibleAmount); 


/// @notice Participate in phase 1 of the Airdrop. PCNFT holder will receive pre-defined 
discount and TAP. 
/// @param _data The calldata. Needs to be the address of the user. 
/// data = (uint256 _tokenID) 
function _participatePhase3( 
bytes calldata_ data 
) internal returns (uint256 oTAPTokenlD) { 


uint256 tokenlD = abi.decode(_data, (uint256)); 


require(PCNFT.ownerOf(_tokenID) == msg.sender, "adb: Not eligible"); 
address tokenIDToAddress = address(uint160(_tokenID)); 
require( 
userParticipation[tokenIDToAddress][3] == false, 
"adb: Already participated" 
); 
// Close eligibility 
// To avoid a potential attack vector, we cast token ID to an address instead of using 
_to, 
// no conflict possible, tokenID goes from 0 ... 714. 


userParticipation[tokenIDToAddress][3] = true; 


uintl28 expiry = uintl28(lastEpochUpdate + EPOCH DURATION); // Set expiry to the 


end of the epoch 


uint256 eligibleAmount = PHASE_3 AMOUNT _PER_USER; 
uint128 discount = uintl28(PHASE_3 DISCOUNT); 


oTAPTokenID = aoTAP.mint(msg.sender, expiry, discount, eligibleAmount); 


/// @notice Participate in phase 4 of the Airdrop. twTAP and Cassava guild's role are given 
TAP pro-rata. 
function _participatePhase4() internal returns (uint256 oTAPTokenID) { 
uint256 _eligibleAmount = phase4Users[msg.sender]; 


require(_eligibleAmount > 0, "adb: Not eligible"); 


// Close eligibility 


phase4Users[msg.sender] = 0; 


// Mint aoTAP 
uintl28 expiry = uintl28(lastEpochUpdate + EPOCH DURATION); // Set expiry to the 
end of the epoch 
oTAPTokenID = aoTAP.mint( 
msg.sender, 
expiry, 
uint128(PHASE_4 DISCOUNT), 


_eligibleAmount 


/// @notice Process the OTC deal, transfer the payment token to the broker and the TAP 


amount to the user 
/// @param _paymentToken The payment token 
/// @param _paymentTokenOracle The oracle of the payment token 
/// @param tapAmount The amount of TAP that the user has to receive 
[I| @param discount The discount that the user has to apply to the OTC deal 
function _processOTCDeal( 
ERC20 paymentToken, 
PaymentTokenOracle memory _paymentTokenOracle, 
uint256 tapAmount, 
uint256 discount 
) internal { 
// Get TAP valuation 


uint256 otcAmountInUSD = tapAmount * epochTAPValuation; 


// Get payment token valuation 
(, uint256 paymentTokenValuation) = _paymentTokenOracle.oracle.get( 


_paymentTokenOracle.oracleData 


// Calculate payment amount and initiate the transfers 

uint256 discountedPaymentAmount = _getDiscountedPaymentAmount( 
otcAmountInUSD, 
paymentTokenValuation, 
discount, 


_paymentToken.decimals() 


require(discountedPaymentAmount > 0, "adb: payment amount is 0"); 
// in case of fee-on-transfer tokens, received amount might be less than 
‘discountedPaymentAmount’ 
IERC20(address(_paymentToken)).safeTransferFrom( 
msg.sender, 
address(this), 


discountedPaymentAmount 


require(tapAmount > 0, "adb: tapAmount is 0"); 


tapOFT.transfer(msg.sender, tapAmount); 


/// @notice Computes the discounted payment amount for a given OTC amount in USD 
/// @param _otcAmountInUSD The OTC amount in USD, 18 decimals 
/// @param _paymentTokenValuation The payment token valuation in USD, 18 decimals 
IIl @param _discount The discount in BPS 
/// @param _paymentTokenDecimals The payment token decimals 
/// @return paymentAmount The discounted payment amount 
function getDiscountedPaymentAmount( 
uint256 _otcAmountInUSD, 
uint256_ paymentTokenValuation, 
uint256 discount, 
uint256_ _paymentTokenDecimals 


) internal pure returns (uint256 paymentAmount) { 


require( 

_paymentTokenValuation > 0, 

"adb: paymentTokenValuation not valid" 
); 
// Calculate payment amount 
uint256 rawPaymentAmount = _otcAmountInUSD /_paymentTokenValuation; 
paymentAmount = 

rawPaymentAmount - 

muldiv(rawPaymentAmount, _discount, 100e4); // 1e4 is discount decimals, 100 is 


discount percentage 


paymentAmount = paymentAmount / (10 ** (18 -__paymentTokenDecimals)); 


----- E:/Train/makePDF/v1\tap-token-main\contracts\option-airdrop/aoTAP.sol---- 
// SPDX-License-lIdentifier: UNLICENSED 


pragma solidity *0.8.18; 


import {BaseBoringBatchable} from 
"@boringcrypto/boring-solidity/contracts/BoringBatchable.sol"; 

import "@boringcrypto/boring-solidity/contracts/BoringOwnable.sol"; 

import "@openzeppelin/contracts/token/ERC721/ERC721.sol"; 


import "@openzeppelin/contracts/token/ERC20/IERC20.sol"; 


import "tapioca-sdk/dist/contracts/util/ERC4494.sol"; 
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struct AirdropTapOption { 

uint128 expiry; // timestamp, as once one wise man said, the sun will go dark before this 
overflows 

uint128 discount; // discount in basis points 


uint256 amount; // amount of eligible TAP 


contract AOTAP is ERC721, ERC721Permit, BaseBoringBatchable, BoringOwnable { 
uint256 public mintedAOTAP; // total number of AOTAP minted 


address public broker; // address of the onlyBroker 


mapping(uint256 => AirdropTapOption) public options; // tokenld => Option 


mapping(uint256 => string) public tokenURISs; // tokenld => tokenURI 


constructor( 
address owner 
) ERC721("Airdrop Option TAP", "aoTAP") ERC721Permit("Airdrop Option TAP") { 


owner = _owner, 


modifier onlyBroker() { 


require(msg.sender == broker, "AOTAP: only onlyBroker"); 


event Mint( 
address indexed to, 
uint256 indexed tokenld, 
AirdropTapOption option 
); 
event Burn( 
address indexed from, 
uint256 indexed tokenld, 


AirdropTapOption option 


function tokenURI( 


uint256 _tokenld 
) public view override returns (string memory) { 


return tokenURIs[_tokenld]; 


function isApprovedOrOwner( 
address spender, 
uint256 _tokenld 

) external view returns (bool) { 


return isApprovedOrOwner(_spender, tokenld); 


/// @notice Return the owner of the tokenld and the attributes of the option. 
function attributes( 

uint256 _tokenld 
) external view returns (address, AirdropTapOption memory) { 


return (ownerOf(_tokenld), options[_tokenld]); 


/// @notice Check if a token exists 
function exists(uint256 tokenld) external view returns (bool) { 


return _exists(_tokenld); 


// WRITE 


function setTokenURI(uint256 _tokenld, string calldata tokenURI) external { 
require( 
_isApprovedOrOwner(msg.sender, _tokenld), 
"AOTAP: only approved or owner" 
); 


tokenURIs[_tokenld] = _tokenURI; 


/// @notice mints an AOTAP 
/// @param _to address to mint to 
/// @param _expiry timestamp 
/// @param _discount TAP discount in basis points 
function mint( 
address to, 
uintl28 expiry, 
uint128 discount, 
uint256 _amount 
) external onlyBroker returns (uint256 tokenld) { 
tokenld = ++mintedAOTAP; 


_SafeMint(_to, tokenld); 


AirdropTapOption storage option = options[tokenld]; 
option.expiry = _expiry; 


option.discount = _discount; 


option.amount = _amount; 


emit Mint(_to, tokenld, option); 


/// @notice burns an AOTAP 
/// @param _tokenld tokenld to burn 
function burn(uint256 tokenld) external { 
require( 
_isApprovedOrOwner(msg.sender, tokenld), 
"AOTAP: only approved or owner" 
); 


_burn(_tokenld); 


emit Burn(msg.sender, tokenld, options[_tokenld]); 


/// @notice ADB claim 
function brokerClaim() external { 
require(broker == address(0), "AOTAP: only once"); 


broker = msg.sender; 


----- E:/Train/makePDF/v1\tap-token-main\contracts\options/oTAP.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


import {BaseBoringBatchable} from 


"@boringcrypto/boring-solidity/contracts/BoringBatchable.sol"; 
import "@openzeppelin/contracts/token/ERC721/ERC721.sol"; 
import "@openzeppelin/contracts/token/ERC20/IERC20.sol"; 


import "tapioca-sdk/dist/contracts/util/ERC4494.sol"; 
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struct TapOption { 

uintl28 expiry; // timestamp, as once one wise man said, the sun will go dark before this 
overflows 

uint128 discount; // discount in basis points 


uint256 tOLP; // tOLP token ID 


contract OTAP is ERC721, ERC721Permit, BaseBoringBatchable { 
uint256 public mintedOTAP; // total number of OTAP minted 


address public broker; // address of the onlyBroker 


mapping(uint256 => TapOption) public options; // tokenld => Option 


mapping(uint256 => string) public tokenURISs; // tokenld => tokenURI 


constructor() ERC721("Option TAP", "oTAP") ERC721Permit("Option TAP") {} 


modifier onlyBroker() { 


require(msg.sender == broker, "OTAP: only onlyBroker"); 


event Mint(address indexed to, uint256 indexed tokenld, TapOption option); 


event Burn(address indexed from, uint256 indexed tokenld, TapOption option); 


function tokenURI( 
uint256 _tokenld 
) public view override returns (string memory) { 


return tokenURIs[_tokenld]; 


function isApprovedOrOwner( 


address spender, 
uint256 _tokenld 
) external view returns (bool) { 


return isApprovedOrOwner(_spender, tokenld); 


/// @notice Return the owner of the tokenld and the attributes of the option. 
function attributes( 

uint256 _tokenld 
) external view returns (address, TapOption memory) { 


return (ownerOf(_tokenld), options[_tokenld]); 


/// @notice Check if a token exists 
function exists(uint256 tokenld) external view returns (bool) { 


return _exists(_tokenld); 


function setTokenURI(uint256 _tokenld, string calldata tokenURI) external { 
require( 
_isApprovedOrOwner(msg.sender, tokenld), 


"OTAP: only approved or owner" 


); 


tokenURIs[_tokenld] = _tokenURI; 


/// @notice mints an OTAP 
/// @param _to address to mint to 
/// @param _expiry timestamp 
IIl @param _discount TAP discount in basis points 
/// @param _tOLP tOLP token ID 
function mint( 
address to, 
uint128 _expiry, 
uint128 _discount, 
uint256 _tOLP 
) external onlyBroker returns (uint256 tokenld) { 
tokenld = ++mintedOTAP; 


_SafeMint(_to, tokenld); 


TapOption storage option = options[tokenld]; 
option.expiry = _expiry; 
option.discount = _discount; 


option.tOLP = tOLP; 


emit Mint(_to, tokenld, option); 


/// @notice burns an OTAP 
/// @param _tokenld tokenld to burn 
function burn(uint256 tokenld) external { 
require( 
_isApprovedOrOwner(msg.sender, tokenld), 
"OTAP: only approved or owner" 
); 


_burn(_tokenld); 


emit Burn(msg.sender, tokenld, options[_tokenld]); 


/// @notice tOB claim 
function brokerClaim() external { 
require(broker == address(0), "OTAP: only once"); 


broker = msg.sender; 


----- E:/Train/makePDF/v1\tap-token-main\contracts\options/TapiocaOptionBroker.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


import "@openzeppelin/contracts/security/ReentrancyGuard.sol"; 
import "@boringcrypto/boring-solidity/contracts/BoringOwnable.sol"; 
import "@openzeppelin/contracts/token/ERC20/ERC20.sol"; 

import "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol"; 
import "@openzeppelin/contracts/security/Pausable.sol"; 

import "tapioca-periph/contracts/interfaces/lOracle.sol"; 

import "./TapiocaOptionLiquidityProvision.sol"; 

import "../tokens/TapOFT.sol"; 

import "../twAML.sol"; 


import "./oTAP.sol"; 
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struct Participation { 
bool hasVotingPower; 
bool divergenceForce; // 0 negative, 1 positive 


uint256 averageMagnitude; 


struct TWAMLPool { 


uint256 totalParticipants; 
uint256 averageMagnitude; 
uint256 totalDeposited; 


uint256 cumulative; 


struct PaymentTokenOracle { 
lOracle oracle; 


bytes oracleData; 


contract TapiocaOptionBroker is 
Pausable, 
BoringOwnable, 
TWAML, 


ReentrancyGuard 


using SafeERC20 for IERC20; 


TapiocaOptionLiquidityProvision public immutable tOLP; 
bytes public tapOracleData; 

TapOFT public immutable tapOFT; 

OTAP public immutable oTAP; 


lOracle public tapOracle; 


uint256 public lastEpochUpdate; // timestamp of the last epoch update 


uint256 public epochTAPValuation; // TAP price for the current epoch 


uint256 public epoch; // Represents the number of weeks since the start of the contract 


mapping(uint256 => Participation) public participants; // tOLPTokenID => Participation 
mapping(uint256 => mapping(uint256 => uint256)) public oTAPCalls; // oTAPTokenID => 


epoch => amountExercised 


mapping(uint256 => mapping(uint256 => uint256)) public singularityGauges; // epoch 


=> sglAssetlId => availableTAP 


mapping(ERC20 => PaymentTokenOracle) public paymentTokens; // Token address => 
PaymentTokenOracle 


address public paymentTokenBeneficiary; // Where to collect the payment tokens 


mapping(uint256 => TWAMLPool) public twAML; // sglAssetiId => twAMLPool 


uint256 constant MIN_WEIGHT_FACTOR = 10; // In BPS, 0.1% 
uint256 constant (MAX = 50 * 1e4; // 5% - 50% discount 
uint256 constant dMIN = 5 * 1e4; 


uint256 public immutable EPOCH DURATION; // 7 days = 604800 


constructor( 
address _tOLP, 


address _oTAP, 


){ 


address payable tapOFT, 
address paymentTokenBeneficiary, 
uint256 epochDuration, 


address owner 


paymentTokenBeneficiary = _paymentTokenBeneficiary; 
tOLP = TapiocaOptionLiquidityProvision(_tOLP); 

tapOFT = TapOFT(_tapOFT); 

OTAP = OTAP(_oTAP); 

EPOCH_DURATION = _epochDuration; 


owner = _owner, 


event Participate( 


); 


uint256 indexed epoch, 
uint256 indexed sglAssetID, 
uint256 totalDeposited, 
LockPosition lock, 


uint256 discount 


event AMLDivergence( 


uint256 indexed epoch, 


uint256 cumulative, 


uint256 averageMagnitude, 
uint256 totalParticipants 

); 

event ExerciseOption( 
uint256 indexed epoch, 
address indexed to, 
ERC20 indexed paymentToken, 
uint256 oTapTokenID, 
uint256 amount 

); 

event NewEpoch( 
uint256 indexed epoch, 
uint256 extractedTAP, 
uint256 epochTAPValuation 

); 

event ExitPosition( 
uint256 indexed epoch, 
uint256 indexed tokenld, 
uint256 amount 

); 

event SetPaymentToken(ERC20 paymentToken, lOracle oracle, bytes oracleData); 


event SetTapOracle(lOracle oracle, bytes oracleData); 


/// @notice Returns the details of an OTC deal for a given oTAP token ID and a payment 
token. 
III The oracle uses the last peeked value, and not the latest one, so the payment 
amount may be different. 
/// @param _oTAPTokenID The oTAP token ID 
/// @param _paymentToken The payment token 
/// @param _tapAmount The amount of TAP to be exchanged. If O it will use the full 
amount of TAP eligible for the deal 
/// @return eligibleTapAmount The amount of TAP eligible for the deal 
/// @return paymentTokenAmount The amount of payment tokens required for the deal 
/// @return tapAmount The amount of TAP to be exchanged 
function getOTCDealDetails( 
uint256 oTAPTokenlD, 
ERC20 paymentToken, 


uint256 tapAmount 


external 

view 

returns ( 
uint256 eligibleTapAmount, 
uint256 paymentTokenAmount, 


uint256 tapAmount 


// Load data 


(, TapOption memory oTAPPosition) = oTAP.attributes(_oTAPTokenID); 
(bool isPositionActive, LockPosition memory tOLPLockPosition) = tOLP 


.getLock(oTAPPosition.tOLP); 


uint256 cachedEpoch = epoch; 


PaymentTokenOracle memory paymentTokenOracle = paymentTokens[ 


_paymentToken 


// Check requirements 
require( 
paymentTokenOracle.oracle != lOracle(address(0)), 


"tOB: Payment token not supported" 


require(isPositionActive, "tOB: Option expired"); 


// Get eligible OTC amount 

uint256 gaugeTotalForEpoch = singularityGauges[cachedEpoch][ 
tOLPLockPosition.sglAssetID 

J; 

eligibleTapAmount = muldiv( 
tOLPLockPosition.amount, 
gaugeTotalForEpoch, 


tOLP.getTotalPoolDeposited(tOLPLockPosition.sglAssetID) 


eligibleTapAmount -= oTAPCalls[_ oTAPTokenID][cachedEpoch]; // Subtract already 


exercised amount 


require(eligibleTapAmount >= _tapAmount, "tOB: Too high"); 


tapAmount = tapAmount == 0 ? eligibleTapAmount : _tapAmount; 
require(tapAmount >= 1e18, "tOB: Too low"); 
// Get TAP valuation 
uint256 otcAmountInUSD = tapAmount * epochTAPValuation; // Divided by TAP 
decimals 
// Get payment token valuation 
(, uint256 paymentTokenValuation) = paymentTokenOracle.oracle.peek( 
paymentTokenOracle.oracleData 
); 
// Get payment token amount 
paymentTokenAmount = _getDiscountedPaymentAmount( 
otcAmountlInUSD, 
paymentTokenValuation, 
oTAPPosition.discount, 


_paymentToken.decimals() 


/// @notice Participate in twAMI voting and mint an oTAP position 
/// @param _tOLPTokenlID The tokenld of the tOLP position 
function participate( 
uint256 tOLPTokenlID 
) external returns (uint256 oTAPTokenlID) { 
// Compute option parameters 
(bool isPositionActive, LockPosition memory lock) = tOLP.getLock( 
_tOLPTokenID 
); 
require(isPositionActive, "tOB: Position is not active"); 


require(lock.lockDuration >= EPOCH_DURATION, "tOB: Duration too short"); 


TWAMLPool memory pool = twAML[lock.sglAssetID]; 


require( 
tOLP.isApprovedOrOwner(msg.sender, tOLPTokenID), 


"tOB: Not approved or owner" 


// Transfer tOLP position to this contract 


tOLP.transferFrom(msg.sender, address(this), tOLPTokenID); 


uint256 magnitude = computeMagnitude( 
uint256(lock.lockDuration), 


pool.cumulative 


); 
bool divergenceForce; 


uint256 target = computeTarget(dMIN, dMAX, magnitude, pool.cumulative); 


// Participate in twAMI voting 
bool hasVotingPower = lock.amount >= 
computeMinWeight(pool.totalDeposited, MIN_WEIGHT_FACTOR); 
if (hasVotingPower) { 
pool.totalParticipants++; // Save participation 
pool.averageMagnitude = 
(pool.averageMagnitude + magnitude) / 


pool.totalParticipants; // compute new average magnitude 


// Compute and save new cumulative 
divergenceForce = lock.lockDuration > pool.cumulative; 
if (divergenceForce) { 
pool.cumulative += pool.averageMagnitude; 
} else { 
if (pool.cumulative > pool.averageMagnitude) { 
pool.cumulative -= pool.averageMagnitude; 
} else { 


pool.cumulative = 0; 


// Save new weight 


pool.totalDeposited += lock.amount; 


twAML{[lock.sglAssetID] = pool; // Save twAML participation 
emit AMLDivergence( 
epoch, 
pool.cumulative, 
pool.averageMagnitude, 
pool.totalParticipants 
); // Register new voting power event 
} 
// Save twAML participation 
participants[_ tOLPTokenID] = Participation( 
hasVotingPower, 
divergenceForce, 


pool.averageMagnitude 


// Mint oTAP position 

oTAPTokenID = oTAP.mint( 
msg.sender, 
lock.lockTime + lock.lockDuration, 
uint128(target), 
_tOLPTokenID 

); 

emit Participate( 


epoch, 


lock.sglAssetID, 
pool.totalDeposited, 
lock, 


target 


/// @notice Exit a twAML participation and delete the voting power if existing 
/// @param _oTAPTokenlD The tokenld of the oTAP position 
function exitPosition(uint256 oTAPTokenlID) external { 


require(oTAP.exists(_ oTAPTokenlID), "tOB: oTAP position does not exist"); 


// Load data 
(, TapOption memory oTAPPosition) = oTAP.attributes(_oTAPTokenID); 


(, LockPosition memory lock) = tOLP.getLock(oTAPPosition.tOLP); 


require( 
block.timestamp >= lock.lockTime + lock.lockDuration, 


"tOB: Lock not expired" 


Participation memory participation = participants[oTAPPosition.tOLP]; 


// Remove participation 


if (participation.hasVotingPower) { 


TWAMLPool memory pool = twAML[lock.sglAssetID]; 


if (participation.divergenceForce) { 
if (pool.cumulative > pool.averageMagnitude) { 
pool.cumulative -= pool.averageMagnitude; 
} else { 
pool.cumulative = 0; 
} 
} else { 


pool.cumulative += pool.averageMagnitude; 


pool.totalDeposited -= lock.amount; 


pool.totalParticipants--; 


twAML[lock.sglAssetID] = pool; // Save twAML exit 
emit AMLDivergence( 

epoch, 

pool.cumulative, 

pool.averageMagnitude, 

pool.totalParticipants 


); // Register new voting power event 


// Delete participation and burn oTAP position 
address otapOwner = oTAP.ownerOf(_oTAPTokenID); 


delete participants[oTAPPosition.tOLP]; 


oTAP.burn(_oTAPTokenID); 


// Transfer position back to oTAP owner 


tOLP.transferFrom(address(this), otapOwner, oTAPPosition.tOLP); 


emit ExitPosition(epoch, oTAPPosition.tOLP, lock.amount); 


/// @notice Exercise an oTAP position 
/// @param _oTAPTokenlD tokenld of the oTAP position, position must be active 
/// @param _paymentToken Address of the payment token to use, must be whitelisted 
/// @param _tapAmount Amount of TAP to exercise. If 0, the full amount is exercised 
function exerciseOption( 

uint256 oTAPTokenlD, 

ERC20 paymentToken, 

uint256 tapAmount 
) external { 

// Load data 

(, TapOption memory oTAPPosition) = oTAP.attributes(_oTAPTokenID); 

(bool isPositionActive, LockPosition memory tOLPLockPosition) = tOLP 


.getLock(oTAPPosition.tOLP); 


uint256 cachedEpoch = epoch; 


PaymentTokenOracle memory paymentTokenOracle = paymentTokens[ 


_paymentToken 


// Check requirements 

require( 
paymentTokenOracle.oracle != lOracle(address(0)), 
"tOB: Payment token not supported" 

); 

require( 
oTAP.isApprovedOrOwner(msg.sender, _oTAPTokenID), 
"tOB: Not approved or owner" 

); 


require(isPositionActive, "tOB: Option expired"); 


// Get eligible OTC amount 

uint256 gaugeTotalForEpoch = singularityGauges[cachedEpoch][ 
tOLPLockPosition.sglAssetID 

J; 

uint256 eligibleTapAmount = muldiv( 
tOLPLockPosition.amount, 
gaugeTotalForEpoch, 


tOLP.getTotalPoolDeposited(tOLPLockPosition.sglAssetID) 


eligibleTapAmount -= oTAPCalls[_ oTAPTokenID][cachedEpoch]; // Subtract already 
exercised amount 


require(eligibleTapAmount >= _tapAmount, "tOB: Too high"); 


uint256 chosenAmount = _tapAmount == 0 ? eligibleTapAmount : _tapAmount; 
require(chosenAmount >= 1e18, "tOB: Too low"); 


oTAPCalls[_oTAPTokenID][cachedEpoch] += chosenAmount; // Adds up exercised 


amount to current epoch 


// Finalize the deal 

_processOTCDeal( 
_paymentToken, 
paymentTokenOracle, 
chosenAmount, 


oTAPPosition.discount 


emit ExerciseOption( 
cachedEpoch, 
msg.sender, 
_paymenttToken, 
_OTAPTokenID, 


chosenAmount 


/// @notice Start a new epoch, extract TAP from the TapOFT contract, 


IH emit it to the active singularities and get the price of TAP for the epoch. 
function newEpoch() external { 


require( 


block.timestamp >= lastEpochUpdate + EPOCH DURATION, 
"tOB: too soon" 

); 

uint256[] memory singularities = tOLP.getSingularities(); 


require(singularities.length > 0, "tOB: No active singularities"); 


// Update epoch info 
lastEpochUpdate = block.timestamp; 


epoch++; 


// Extract TAP 
uint256 epochTAP = tapOFT.emitForWeek(); 


_emitToGauges(epochTAP); 


// Get epoch TAP valuation 
(, epochTAPValuation) = tapOracle.get(tapOracleData); 


emit NewEpoch(epoch, epochTAP, epochTAPValuation); 


/// @notice Claim the Broker role of the oTAP contract 


function oTAPBrokerClaim() external { 


oTAP.brokerClaim(); 


// OWNER 


/// @notice Set the TapOFT Oracle address and data 
/// @param _tapOracle The new TapOFT Oracle address 
/// @param _tapOracleData The new TapOFT Oracle data 
function setTapOracle( 

lOracle tapOracle, 

bytes calldata_tapOracleData 
) external onlyOwner { 

tapOracle = _tapOracle; 


tapOracleData = tapOracleData; 


emit SetTapOracle(_tapOracle, tapOracleData); 


/// @notice Activate or deactivate a payment token 
/// @dev set the oracle to address(0) to deactivate, expect the same decimal precision as 
TAP oracle 
function setPaymentToken( 
ERC20 paymentToken, 
lOracle _oracle, 
bytes calldata _oracleData 
) external onlyOwner { 
paymentTokens[_paymentToken].oracle = _oracle; 


paymentTokens[_paymentToken].oracleData = _oracleData; 


emit SetPaymentToken(_paymentToken, oracle, oracleData); 


/// @notice Set the payment token beneficiary 
/// @param _paymentTokenBeneficiary The new payment token beneficiary 
function setPaymentTokenBeneficiary( 
address paymentTokenBeneficiary 
) external onlyOwner { 


paymentTokenBeneficiary = _paymentTokenBeneficiary; 


/// @notice Collect the payment tokens from the OTC deals 
/// @param _paymentTokens The payment tokens to collect 
function collectPaymentTokens( 
address[] calldata_paymentTokens 
) external onlyOwner nonReentrant { 
require( 
paymentTokenBeneficiary != address(0), 
"tOB: Payment token beneficiary not set" 
); 


uint256 len = _paymentTokens.length; 


unchecked { 
for (uint256 i = 0; i < len; ++i) { 
IERC20 paymentToken = IERC20(_paymentTokens[i]); 


paymentToken.safeTransfer( 


paymentTokenBeneficiary, 


paymentToken.balanceOf(address(this)) 


} 
} 
} 
|| ============ 
// INTERNAL 
|| ============ 


/// @notice Process the OTC deal, transfer the payment token to the broker and the TAP 
amount to the user 
/// @param _paymentToken The payment token 
/// @param _paymentTokenOracle The oracle of the payment token 
/// @param tapAmount The amount of TAP that the user has to receive 
/// @param discount The discount that the user has to apply to the OTC deal 
function processOTCDeal( 
ERC20 paymentToken, 
PaymentTokenOracle memory _paymentTokenOracle, 
uint256 tapAmount, 
uint256 discount 
) internal { 
// Get TAP valuation 


uint256 otcAmountInUSD = tapAmount * epochTAPValuation; 


// Get payment token valuation 
(, uint256 paymentTokenValuation) = _paymentTokenOracle.oracle.get( 


_paymentTokenOracle.oracleData 


// Calculate payment amount and initiate the transfers 

uint256 discountedPaymentAmount = _getDiscountedPaymentAmount( 
otcAmountInUSD, 
paymentTokenValuation, 
discount, 


_paymentToken.decimals() 


IERC20(address(_paymentToken)).safeTransferFrom( 
msg.sender, 
address(this), 
discountedPaymentAmount 

); 


tapOFT.extractTAP(msg.sender, tapAmount); 


/// @notice Computes the discounted payment amount for a given OTC amount in USD 
/// @param _otcAmountInUSD The OTC amount in USD, 18 decimals 

/// @param _paymentTokenValuation The payment token valuation in USD, 18 decimals 
/// @param _discount The discount in BPS 


/// @param _paymentTokenDecimals The payment token decimals 


/// @return paymentAmount The discounted payment amount 
function getDiscountedPaymentAmount( 
uint256 _otcAmountInUSD, 
uint256_ paymentTokenValuation, 
uint256 discount, 
uint256 _paymentTokenDecimals 
) internal pure returns (uint256 paymentAmount) { 
require( 
_paymentTokenValuation > 0, 
"tOB: paymentTokenValuation not valid" 
); 
// Calculate payment amount 
uint256 rawPaymentAmount = _otcAmountInUSD /_paymentTokenValuation; 
paymentAmount = 
rawPaymentAmount - 
muldiv(rawPaymentAmount, _discount, 100e4); // 1e4 is discount decimals, 100 is 
discount percentage 


paymentAmount = paymentAmount / (10 ** (18 - _paymentTokenDecimals)); 


/// @notice Emit TAP to the gauges equitably 
function emitToGauges(uint256 epochTAP) internal { 
SingularityPool[] memory sglPools = tOLP.getSingularityPools(); 


uint256 totalWeights = tOLP.totalSingularityPoolWeights(); 


uint256 len = sgIPools.length; 


unchecked { 
for (uint256 i = 0; i < len; ++i) { 

uint256 currentPoolWeight = sgIPools[i].poolWeight; 

uint256 quotaPerSingularity = muldiv( 
currentPoolWeight, 
_epochTAP, 
totalWeights 

); 

singularityGauges[epoch][ 
sgIPools[i].sglAssetID 


] = quotaPerSingularity; 


----- E:/Train/makePDF/v1\tap-token-main\contracts\options/TapiocaOptionLiquidityProvision.s 


ol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


import {BaseBoringBatchable} 
"@boringcrypto/boring-solidity/contracts/BoringBatchable.sol"; 

import "@openzeppelin/contracts/token/ERC1155/IERC1155Receiver.sol"; 
import "@boringcrypto/boring-solidity/contracts/BoringOwnable.sol"; 
import "@openzeppelin/contracts/token/ERC1155/IERC1155.sol"; 

import "@openzeppelin/contracts/token/ERC721/ERC721.sol"; 

import "@openzeppelin/contracts/token/ERC20/IERC20.sol"; 

import "@openzeppelin/contracts/security/Pausable.sol"; 

import "tapioca-sdk/dist/contracts/util/ERC4494.sol"; 


import "tapioca-sdk/dist/contracts/YieldBox/contracts/interfaces/lYieldBox.sol"; 
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struct LockPosition { 
uint128 sglAssetID; // Singularity market YieldBox asset ID 
uintl28 amount; // amount of tOLR tokens locked. 
uint128 lockTime; // time when the tokens were locked 


uint128 lockDuration; // duration of the lock 


struct SingularityPool { 
uint256 sglAssetID; // Singularity market YieldBox asset ID 
uint256 totalDeposited; // total amount of tOLR tokens deposited, used for pool share 
calculation 


uint256 poolWeight; // Pool weight to calculate emission 


contract TapiocaOptionLiquidityProvision is 
ERC721, 
ERC721Permit, 
BaseBoringBatchable, 
Pausable, 


BoringOwnable 


uint256 public tokenCounter; // Counter for token IDs 


mapping(uint256 => LockPosition) public lockPositions; // TokenID => LockPosition 


lYieldBox public immutable yieldBox; 


// Singularity market address => SingularityPool (YieldBox Asset ID is 0 if not active) 

mapping(IERC20 => SingularityPool) public activeSingularities; 

mapping(uint256 => IERC20) public sglAssetIDToAddress; // Singularity market YieldBox 
asset ID => Singularity market address 


uint256[] public singularities; // Array of active singularity asset IDs 


uint256 public totalSingularityPoolWeights; // Total weight of all active singularity pools 


constructor( 


address _yieldBox, 


address owner 


ERC721("TapiocaOptionLiquidityProvision", "tOLP") 


ERC721Permit("TapiocaOptionLiquidityProvision") 


yieldBox = lYieldBox(_yieldBox); 


owner = _owner, 


event Mint( 
address indexed to, 
uint128 indexed sglAssetID, 
LockPosition lockPosition 
); 
event Burn( 
address indexed to, 
uint128 indexed sglAssetID, 
LockPosition lockPosition 
); 
event UpdateTotalSingularityPoolWeights( 
uint256 totalSingularityPoolWeights 
); 
event SetSGLPoolWeight(address indexed sgl, uint256 poolWeight); 
event RegisterSingularity(address indexed sgl, uint256 indexed assetID); 


event UnregisterSingularity(address indexed sgl, uint256 indexed assetID); 


// MODIFIERS 


modifier updateTotalSGLPoolWeights() { 


r 


totalSingularityPoolWeights = _computeSGLPoolWeights(); 


emit UpdateTotalSingularityPoolWeights(totalSingularityPoolWeights); 


/// @notice Returns the lock position of a given tOLP NFT and if it's active 
/// @param _tokenld tOLP NFT ID 
function getLock( 
uint256 _tokenld 
) external view returns (bool, LockPosition memory) { 


LockPosition memory lockPosition = lockPositions[_tokenld]; 


return (_isPositionActive(_tokenld), lockPosition); 


/// @notice Returns the active singularity YieldBox ID markets 


function getSingularities() external view returns (uint256[] memory) { 


return singularities; 


/// @notice Returns the active singularity pool data 
function getSingularityPools() 

external 

view 


returns (SingularityPool[] memory) 


uint256[] memory _singularities = singularities; 


uint256 len = _singularities.length; 


SingularityPool[] memory pools = new SingularityPool[](len); 
unchecked { 
for (uint256 i = 0; i < len; ++i) { 
pools[i] = activeSingularities[ 


sglAssetIDToAddress[_singularities[i]] 


} 


return pools; 


/// @notice Returns the total amount of locked tokens for a given singularity market 
function getTotalPoolDeposited( 

uint256 sglAssetld 
) external view returns (uint256) { 

return 


activeSingularities[sglAssetIDToAddress[_sglAssetlid]] 


.totalDeposited; 


function isApprovedOrOwner( 
address spender, 
uint256 _tokenld 

) external view returns (bool) { 


return isApprovedOrOwner(_spender, tokenld); 


/// @notice Locks tOLR tokens for a given duration 
/// @param _to Address to mint the tOLP NFT to 
/// @param _singularity Singularity market address 
/// @param _lockDuration Duration of the lock 
/// @param _amount Amount of tOLR tokens to lock 
/// @return tokenld The ID of the minted NFT 
function lock( 

address to, 

IERC20 singularity, 

uint128 lockDuration, 

uintl28 amount 


) external returns (uint256 tokenld) { 


require(_lockDuration > 0, "tOLP: lock duration must be > 0"); 


require(_amount > 0, "tOLP: amount must be > 0"); 


uint256 sglAssetID = activeSingularities[_singularity].sglAssetID; 


require(sglAssetID > 0, "tOLP: singularity not active"); 


// Transfer the Singularity position to this contract 


uint256 sharesIn = yieldBox.toShare(sglAssetID, amount, false); 


yieldBox.transfer(msg.sender, address(this), sglAssetID, sharesIn); 


activeSingularities[_singularity].totalDeposited += amount; 


// Mint the tOLP NFT position 
tokenld = ++tokenCounter; 


_SafeMint(_to, tokenld); 


// Create the lock position 

LockPosition storage lockPosition = lockPositions[tokenld]; 
lockPosition.lockTime = uint128(block.timestamp); 
lockPosition.sglAssetID = uint128(sglAssetID); 
lockPosition.lockDuration = _lockDuration; 


lockPosition.amount = _amount; 


emit Mint(_to, uintl28(sglAssetID), lockPosition); 


/// @notice Unlocks tOLP tokens 
/// @param _tokenld ID of the position to unlock 
/// @param _singularity Singularity market address 
/// @param _to Address to send the tokens to 
function unlock( 

uint256 _tokenld, 

IERC20 singularity, 

address to 
) external returns (uint256 sharesOut) { 


require(_exists(_tokenld), "tOLP: Expired position"); 


LockPosition memory lockPosition = lockPositions[_tokenld]; 
require( 
block.timestamp >= 
lockPosition.lockTime + lockPosition.lockDuration, 
"tOLP: Lock not expired" 
); 
require( 
activeSingularities[_singularity].sglAssetID == 
lockPosition.sglAssetID, 


"tOLP: Invalid singularity" 


require( 
_isApprovedOrOwner(msg.sender, tokenld), 


"tOLP: not owner nor approved" 


_burn(_tokenld); 


delete lockPositions[_tokenld]; 


// Transfer the tOLR tokens back to the owner 

sharesOut = yieldBox.toShare( 
lockPosition.sglAssetID, 
lockPosition.amount, 


false 


yieldBox.transfer( 
address(this), 
_to, 
lockPosition.sglAssetID, 
sharesOut 

); 


activeSingularities[_singularity].totalDeposited -= lockPosition.amount; 


emit Burn(_to, lockPosition.sglAssetID, lockPosition); 


/// @notice Sets the pool weight of a given singularity market 
/// @param singularity Singularity market address 
/// @param weight Weight of the pool 
function setSGLPoolWEight( 
IERC20 singularity, 
uint256 weight 
) external onlyOwner updateTotalSGLPoolWeights { 
require( 
activeSingularities[singularity].sglAssetID > 0, 
"tOLP: not registered" 
); 


activeSingularities[singularity].poolWeight = weight; 


emit SetSGLPoolWeight(address(singularity), weight); 


/// @notice Registers a new singularity market 
/// @param singularity Singularity market address 
/// @param assetID YieldBox asset ID of the singularity market 
/// @param weight Weight of the pool 
function registerSingularity( 
IERC20 singularity, 
uint256 assetID, 
uint256 weight 


) external onlyOwner updateTotalSGLPoolWeights { 


require(assetID > 0, "tOLP: invalid asset ID"); 
require( 
activeSingularities[singularity].sglAssetID == 0, 


"tOLP: already registered" 


activeSingularities[singularity].sglAssetID = assetID; 
activeSingularities[singularity].poolWeight = weight > 0 ? weight : 1; 
sglAssetIDToAddress[assetID] = singularity; 


singularities.push(assetID); 


emit RegisterSingularity(address(singularity), assetID); 


/// @notice Un-registers a singularity market 
/// @param singularity Singularity market address 
function unregisterSingularity( 
IERC20 singularity 
) external onlyOwner updateTotalSGLPoolWeights { 
uint256 sglAssetID = activeSingularities[singularity].sglAssetID; 


require(sglAssetID > 0, "tOLP: not registered"); 


unchecked { 
uint256[] memory _singularities = singularities; 
uint256 sglLength = _singularities.length; 


uint256 sglLastindex = sglLength - 1; 


for (uint256 i = 0; i < sglLength; i++) { 

// \f last element, just pop 

if (i == sglLastIndex) { 
delete activeSingularities[singularity]; 
delete sglAssetIDToAddress[sglAssetID]; 
singularities.pop(); 

} else if ( 
_singularities[i] == sglAssetID && i < sglLastlIndex 

){ 
// \f in the middle, copy last element on deleted element, then pop 
delete activeSingularities[singularity]; 


delete sglAssetIDToAddress[sglAssetID]; 


singularities[i] = _singularities[sglLastIndex]; 
singularities.pop(); 


break; 


emit UnregisterSingularity(address(singularity), sglAssetID); 


// INTERNAL 


/// @notice Compute the total pool weight of all active singularity markets 
function computeSGLPoolWeights() internal view returns (uint256) { 
uint256 total; 
uint256 len = singularities.length; 
for (uint256 i = 0; i < len; i++) { 
total += activeSingularities[sglAssetIDToAddress[singularities[i]]] 


.poolWeight; 


return total: 


/// @notice Checks if the lock position is still active 
function _isPositionActive(uint256 tokenld) internal view returns (bool) { 


LockPosition memory lockPosition = lockPositions[tokenld]; 


return 
(lockPosition.lockTime + lockPosition.lockDuration) >= 


block.timestamp; 


/// @notice ERC1155 compliance 
function onERC1155Received( 


address, 


address, 

uint256, 

uint256, 

bytes calldata 

) external pure returns (bytes4) { 
return 
bytes4( 
keccak256( 


"OnERC1155Received(address,address,uint256,uint256,bytes)" 


----- E:/Train/makePDF/v1\tap-token-main\contracts\tokens/BaseTapOFT.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity ^0.8.18; 


import {ILayerZeroEndpoint} from 
"tapioca-sdk/dist/contracts/interfaces/ILayerZeroEndpoint.sol"; 

import "@openzeppelin/contracts/token/ERC20/extensions/draft-ERC20Permit.sol"; 

import "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol"; 

import {LzLib} from "tapioca-sdk/dist/contracts/libraries/LZLib.sol"; 

import "tapioca-periph/contracts/interfaces/ITapiocaOFT.sol"; 

import "tapioca-sdk/dist/contracts/token/oft/v2/OFTV2.sol"; 


import {TwTAP} from "../governance/twTAP.sol"; 
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struct IRewardClaimSendFromParams { 


uint256 ethValue; 


ITapiocaOFT.LzCallParams callParams; 


abstract contract BaseTapOFT is OFTV2 { 


using ExcessivelySafeCall for address; 


using BytesLib for bytes; 


using SafeERC20 for IERC20; 
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TwTAP public twTap; 


uint16 internal constant PT_LOCK_TWTAP = 870; 
uintl6 internal constant PT_ UNLOCK_TWTAP = 871; 


uintl6 internal constant PT_CLAIM_REWARDS = 872; 


event CallFailedStr( 
uintl6 indexed _srcChainld, 
bytes payload, 
string _reason 

); 

event CallFailedBytes( 
uintl6 indexed _srcChainld, 
bytes _payload, 


bytes _reason 


constructor( 
string memory _name, 
string memory _symbol, 
uint8 _sharedDec, 
address _lzEndpoint 


) OFTV2(_name, symbol, sharedDec, _lzEndpoint) {} 


eae ae 


function _nonblockingLzReceive( 


uint16 _srcChainld, 
bytes memory _srcAddress, 
uint64 nonce, 
bytes memory _payload 
) internal virtual override { 


uint256 packetType = _payload.toUint256(0); 


if (packetType == PT_LOCK_TWTAP) { 
_lockTwTapPosition(_srcChainld, srcAddress, nonce, payload); 
} else if (packetType == PT_UNLOCK_TWTAP) { 
_unlockTwTapPosition(_srcChainld, srcAddress, nonce, payload); 
} else if (packetType == PT_CLAIM REWARDS) { 
_claimRewards(_srcChainld, srcAddress, nonce, payload); 
} else { 
packetType = _payload.toUint8(0); 
if (packetType == PT_SEND) { 
_sendAck(_srcChainld, srcAddress, nonce, payload); 
} else if (packetType == PT SEND_AND CALL) { 
_sendAndCallAck(_srcChainld, srcAddress, nonce, payload); 
} else { 


revert("TOFT_ packet"); 


/// @notice Opens a twTAP by participating in twAML. 
/// @param to The address to add the twTAP position to. 
/// @param amount The amount to add. 
/// @param |zDstChainld The destination chain id. 
/// @param zroPaymentAddress The address to send the ZRO payment to. 
/// @param adapterParams The adapter params. 
function lockTwTapPosition( 

address to, 

uint256 amount, // Amount to add 

uint256 duration, // Duration of the position. 

uint16 IzDstChainld, 

address zroPaymentAddress, 

bytes calldata adapterParams 
) external payable { 


(amount, ) = _removeDust(amount); 


bytes memory IzPayload = abi.encode( 
PT LOCK_TWTAP, // packet type 
msg.sender, 
to, 
_Id2sd(amount), 


duration 


require(duration > 0, "TapOFT: Small duration"); 


bytes32 senderBytes = LzLib.addressToBytes32(msg.sender); 


_debitFrom(msg.sender, IzEndpoint.getChainld(), senderBytes, amount); 


_IzSend( 
IzDstChainld, 
IzPayload, 
payable(msg.sender), 
zroPaymentAddress, 
adapterParams, 


msg.value 


emit SendToChain( 
IzDstChainld, 
msg.sender, 
LzLib.addressToBytes32(to), 


0 


function lockTwTapPosition( 
uint16 _srcChainld, 


bytes memory _srcAddress, 


uint64 nonce, 
bytes memory _payload 
) internal virtual { 
(, , address to, uint64 amountSD, uint duration) = abi.decode( 
_payload, 


(uintl6, address, address, uint64, uint256) 


uint256 amount = _sd2Ild(amountSD); 
_creditTo(_srcChainld, address(this), amount); 


approve(address(twTap), amount); 


// We participate and mint with TapOFT as a receiver 

try twTap.participate(to, amount, duration) {} catch Error( 
string memory _reason 

){ 
// If the process fails, we send back the funds to the user 
// We send back the funds to the user 
emit CallFailedStr(_srcChainld, payload, reason); 
_transferFrom(address(this), to, amount); 

} catch (bytes memory _reason) { 
emit CallFailedBytes(_srcChainld, payload, reason); 


_transferFrom(address(this), to, amount); 


_storeFailedMessage( 


_srcChainld, 


_srcAddress, 


_nonce, 
_payload, 
_reason 
); 
} 
} 
IIl ------------------------------ 
IIl ------- CLAIM REWARDS -------- 
IIl ------------------------------ 


/// @notice Claim rewards from a twTAP position. 
/// @param to The address to add the twTAP position to. 
/// @param tokenID Token ID of the twTAP position. 
/// @param rewardTokens The address of the reward tokens. 
/// @param |zDstChainld The destination chain id. 
/// @param zroPaymentAddress The address to send the ZRO payment to. 
/// @param adapterParams The adapter params. 
/// @param rewardClaimSendParams The adapter params to send back the TAP token. 
function claimRewards( 
address to, 
uint256 tokenlD, 
address[] memory rewardTokens, 
uint16 IzDstChainld, 


address zroPaymentAddress, 


bytes calldata adapterParams, 


IRewardClaimSendFromParams[] calldata rewardClaimSendParams 


) external payable { 


require( 


rewardTokens.length == rewardClaimSendParams.length, 


“TapOFT: length mismatch" 


bytes memory IzPayload = abi.encode( 


PT_CLAIM_REWARDS, // packet type 
msg.sender, 

to, 

tokenlD, 

rewardtTokens, 


rewardClaimSendParams 


_IzSend( 


IzDstChainld, 
IzPayload, 
payable(msg.sender), 
zroPaymentAddress, 
adapterParams, 


msg.value 


emit SendToChain( 
IzDstChainld, 
msg.sender, 
LzLib.addressToBytes32(to), 


0 


function _claimRewards( 
uint16 _srcChainld, 
bytes memory _srcAddress, 
uint64 nonce, 
bytes memory _payload 

) internal virtual { 


( 


address to, 
uint256 tokenlID, 
IERC20[] memory rewardTokens, 
IRewardClaimSendFromParams[] memory rewardClaimSendParams 
) = abi.decode( 
_payload, 
( 
uint16, 


address, 


address, 
uint256, 
IERC20[], 


IRewardClaimSendFromParams[] 


// Only the owner can unlock 


require(twTap.ownerOf(tokenID) == to, "TapOFT: Not owner"); 


// Exit and receive tokens to this contract 


try twTap.claimAndSendRewards(tokenID, rewardTokens) { 


// Transfer them to the user 
uint256 len = rewardTokens.length; 
for (uint i = 0; i < len; ) { 
uint256 amountToSend = IERC20(rewardTokens[i]).balanceOf( 
address(this) 
); 
(uint256 amountWithoutDust, ) = _removeDust(amountToSend); 
if (amountWithoutDust < amountToSend) { 
IERC20(rewardTokens[i]).safeTransfer( 
to, 


amountToSend - amountWithoutDust 


} 


ISendFrom(address(rewardTokens[i])).sendFrom{ 


value: rewardClaimSendParams[i].ethValue 
}( 

address(this), 

_srcChainld, 

LzLib.addressToBytes32(to), 

amountWithoutDust, 


rewardClaimSendParams[i].callParams 


++i; 


} catch Error(string memory _reason) { 
emit CallFailedStr(_srcChainld, payload, reason); 
} catch (bytes memory _reason) { 


emit CallFailedBytes(_srcChainld, payload, reason); 


_storeFailedMessage( 
_srcChainld, 
_srcAddress, 
_nonce, 

_payload, 


_reason 


/// @notice Exit a twTAP by participating in twAML. 
/// @param to The address to add the twTAP position to. 
/// @param tokenID Token ID of the twTAP position. 
/// @param |zDstChainld The destination chain id. 
/// @param zroPaymentAddress The address to send the ZRO payment to. 
/// @param adapterParams The adapter params. 
/// @param twTapSendBackAdapterParams The adapter params to send back the TAP 
token. 
function unlockTwTapPosition( 
address to, 
uint256 tokenlD, 
uint16 IzDstChainld, 
address zroPaymentAddress, 
bytes calldata adapterParams, 
LzCallParams calldata twTapSendBackAdapterParams 
) external payable { 
bytes memory IzPayload = abi.encode( 
PT UNLOCK _TWTAP, // packet type 
msg.sender, 
to, 
tokenlID, 


twTapSendBackAdapterParams 


_IzSend( 
IzDstChainld, 
IzPayload, 
payable(msg.sender), 
zroPaymentAddress, 
adapterParams, 


msg.value 


emit SendToChain( 
IzDstChainld, 
msg.sender, 
LzLib.addressToBytes32(to), 


0 


function unlockTwTapPosition( 
uintl6 _srcChainld, 
bytes memory _srcAddress, 
uint64 nonce, 
bytes memory _payload 

) internal virtual { 


( 


address to, 
uint256 tokenlID, 
LzCallParams memory twTapSendBackAdapterParams 
) = abi.decode( 
_payload, 


(uint16, address, address, uint256, LzCallParams) 


// Only the owner can unlock 


require(twTap.ownerOf(tokenID) == to, "TapOFT: Not owner"); 


// Exit and receive tokens to this contract 
try twTap.exitPositionAndSendTap(tokenID) returns (uint256 amount) { 
(uint256 amountWithoutDust, ) = _removeDust(_amount); 
if (amountWithoutDust < amount) { 
IERC20(address(this)).safeTransfer( 
to, 


_amount - amountWithoutDust 


// Transfer them to the user 
this.sendFrom{value: address(this).balance } ( 
address(this), 


_srcChainld, 


LzLib.addressToBytes32(to), 
amountWithoutDust, 
twTapSendBackAdapterParams 
); 
} catch Error(string memory _reason) { 
emit CallFailedStr(_srcChainld, payload, reason); 
} catch (bytes memory _reason) { 


emit CallFailedBytes(_srcChainld, payload, reason); 


_storeFailedMessage( 
_srcChainld, 
_srcAddress, 
_nonce, 

_payload, 


_reason 


/// @notice rescues unused ETH from the contract 

/// @param amount the amount to rescue 

/// @param to the recipient 

function rescueEth(uint256 amount, address to) external onlyOwner { 
(bool success, ) = to.call{value: amount}(""); 


require(success, "TapOFT: failed to rescue"); 


function setTwTap(address twTap) external onlyOwner { 


twTap = TwWTAP(_twTap); 


receive() external payable virtual {} 


function _callApproval(ICommonData.lApproval[] memory approvals) private { 
for (uint256 i = 0; i < approvals.length; ) { 
try 
IERC20Permit(approvals[i].target).permit( 
approvals[i].owner, 
approvals[i].spender, 
approvals[i].value, 
approvals[i].deadline, 
approvals[i].v, 
approvals[i].r, 
approvals[i].s 
) 
{} catch Error(string memory reason) { 
if (!approvals[i].allowFailure) { 


revert(reason); 


unchecked { 


++i; 


----- E:/Train/makePDF/v1\tap-token-main\contracts\tokens/LTap.sol---- 


// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


import "@boringcrypto/boring-solidity/contracts/BoringOwnable.sol"; 


import "@openzeppelin/contracts/token/ERC20/extensions/draft-ERC20Permit.sol"; 


import "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol"; 
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/// @title LTAP 
/// @notice Locked TAP 
contract LTap is BoringOwnable, ERC20Permit { 


using SafeERC20 for IERC20; 


IERC20 tapToken; 
uint256 public lockedUntil; 


uint256 public maxLockedUntil; 


/// @notice Creates a new LTAP token 

//1 @dev LTAP tokens are minted by depositing TAP 

/// @param _tapToken Address of the TAP token 

/// @param _maxLockedUntil Latest possible end of locking period 


constructor( 


IERC20 _tapToken, 
uint256 _maxLockedUntil 
) ERC20("LTAP", "LTAP") ERC20Permit("LTAP") { 
tapToken = _tapToken; 
lockedUntil = _maxLockedUntil; 


maxLockedUntil = _maxLockedUntil; 


function deposit(uint256 amount) external { 
tapToken.safeTransferFrom(msg.sender, address(this), amount); 


_mint(msg.sender, amount); 


function redeem() external { 
require(block.timestamp > lockedUntil, "Still locked"); 
uint256 amount = balanceOf(msg.sender); 
_burn(msg.sender, amount); 


tapToken.safeTransfer(msg.sender, amount); 


function setLockedUntil(uint256 lockedUntil) external onlyOwner { 
require(_lockedUntil <= maxLockedUntil, "Too late"); 


lockedUntil = _lockedUntil; 


----- E:/Train/makePDF/v1\tap-token-main\contracts\tokens/TapOFT.sol---- 


// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


import {ERC20Permit} from 
"@openzeppelin/contracts/token/ERC20/extensions/draft-ERC20Permit.sol"; 
import "./BaseTapOFT.sol"; 
/ * 
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/// @title Tapioca OFT token 

/// @notice OFT compatible TAP token 

/// @dev Latest size: 17.663 KiB 

/// @dev Emissions E(x)= E(x-1) - E(x-1) * D with E being total supply a x week, and D the 
initial decay rate 


contract TapOFT is BaseTapOFT, ERC20Permit { 


// * DSO: 53,313,405 


// * DAO: 8m 


// * Contributors: 15m 

// * Early supporters: 3,686,595 

// * Supporters: 12.5m 

//* LBP: 5m 

// * Airdrop: 2.5m 

// == 100M == 

uint256 public constant INITIAL SUPPLY = 46 686 595 * 1e18; // Everything minus DSO 


uint256 public dso supply = 53 313 405 * 1e18; 


/// @notice the a parameter used in the emission function; 
uint256 constant decay_rate = 8800000000000000; // 0.88% 


uint256 constant DECAY_RATE_DECIMAL = 1e18; 


/// @notice seconds in a week 


uint256 public constant WEEK = 604800; 


/// @notice starts time for emissions 
/// @dev initialized in the constructor with block.timestamp 


uint256 public immutable emissionsStartTime; 


/// @notice returns the amount of emitted TAP for a specific week 
/// @dev week is computed using (timestamp - emissionStartTime) / WEEK 


mapping(uint256 => uint256) public emissionForWeek; 


/// @notice returns the amount minted for a specific week 


/// @dev week is computed using (timestamp - emissionStartTime) / WEEK 


mapping(uint256 => uint256) public mintedInWeek; 


/// @notice returns the minter address 


address public minter; 


/// @notice LayerZero governance chain identifier 


uint256 public governanceChainldentifier; 


/// @notice returns the pause state of the contract 


bool public paused; 


/// @notice event emitted when a new minter is set 

event MinterUpdated(address indexed _old, address indexed _new); 

/// @notice event emitted when a new emission is called 

event Emitted(uint256 week, uint256 amount); 

/// @notice event emitted when new TAP is minted 

event Minted(address indexed by, address indexed to, uint256 amount); 
/// @notice event emitted when new TAP is burned 

event Burned(address indexed from, uint256 _amount); 

/// @notice event emitted when the governance chain identifier is updated 
event GovernanceChainldentifierUpdated(uint256 old, uint256 new); 

/// @notice event emitted when pause state is changed 


event PausedUpdated(bool oldState, bool newState); 


modifier notPaused() { 


require(!paused, "TAP: paused"); 


/// @notice Creates a new TAP OFT type token 
/// @dev The initial supply of 100M is not minted here as we have the wrap method 
/// @param _|lzEndpoint the layer zero address endpoint deployed on the current chain 
[I| @param _contributors address of the contributors. 15m 
/// @param _earlySupporters address of early supporters. 3,686,595 
/// @param _supporters address of supporters. 12.5m 
/// @param _lbp address of the LBP. 5m 
/// @param _dao address of the DAO. 8m 
/// @param _airdrop address of the airdrop contract. 2.5m 
/// @param _governanceChainld LayerZero governance chain identifier 
/// @param _conservator address of the conservator/owner 
constructor( 
address _|zEndpoint, 
address contributors, 
address _earlySupporters, 
address supporters, 


address lbp, 


address dao, 
address _airdrop, 
uint256 _governanceChainld, 
address _conservator 
) BaseTapOFT("TapOFT", "TAP", 8, IzEndpoint) ERC20Permit("TapOFT") { 
require(_IzEndpoint != address(0), "LZ endpoint not valid"); 
governanceChainldentifier = _governanceChainld; 
if (_getChainld() == governanceChainldentifier) { 
_mint(_contributors, le18 * 15 000 000); 
_mint(_earlySupporters, 1e18 * 3_ 686 595); 
_mint(_supporters, 1e18 * 12 500 000); 
_mint(_lbp, 1e18 * 5_000 000); 
_mint(_dao, 1e18 * 8 _000_000); 
_mint(_airdrop, 1e18 * 2_500 000); 
require( 
totalSupply() == INITIAL_SUPPLY, 


"initial supply not valid" 


} 


emissionsStartTime = block.timestamp; 


transferOwnership(_conservator); 


///-- Owner methods -- 


/// @notice sets the governance chain identifier 


/// @param _identifier LayerZero chain identifier 
function setGovernanceChainldentifier( 
uint256 identifier 
) external onlyOwner { 
emit GovernanceChainldentifierUpdated( 
governanceChainldentifier, 
_identifier 
); 


governanceChainldentifier = _identifier; 


/// @notice updates the pause state of the contract 
/// @param val the new value 
function updatePause(bool val) external onlyOwner { 
require(val != paused, "TAP: same state"); 
emit PausedUpdated(paused, val); 


paused = val; 


/// @notice sets a new minter address 

/// @param _minter the new address 

function setMinter(address _minter) external onlyOwner { 
require(_minter != address(0), "address not valid"); 
emit MinterUpdated(minter, minter); 


minter = _minter; 


//-- View methods -- 
/// @notice returns token's decimals 
function decimals() public pure override returns (uint8) { 


return 18; 


/// @notice Returns the current week given a timestamp 
function timestamp ToWeek( 
uint256 timestamp 
) external view returns (uint256) { 
if (timestamp == 0) { 
timestamp = block.timestamp; 
} 


if (timestamp < emissionsStartTime) return 0; 


return _timestampToWeek(timestamp); 


/// @notice Returns the current week 


function getCurrentWeek() external view returns (uint256) { 


return _timestampToWeek(block.timestamp); 


/// @notice Returns the current week emission 


function getCurrentWeekEmission() external view returns (uint256) { 


return emissionForWeek[_timestampToWeek(block.timestamp)]; 


///-- Write methods -- 

/// @notice Emit the TAP for the current week 

/// @return the emitted amount 

function emitForWeek() external notPaused returns (uint256) { 


require(_getChainld() == governanceChainldentifier, "chain not valid"); 


uint256 week = _timestampToWeek(block.timestamp); 


if (emissionForWeek[week] > 0) return 0; 


// Update DSO supply from last minted emissions 


dso_supply -= mintedInWeek[week - 1]; 


// Compute unclaimed emission from last week and add it to the current week emission 
uint256 unclaimed = emissionForWeek[week - 1] - mintedInWeek[week - 1]; 

uint256 emission = uint256(_computeEmission()); 

emission += unclaimed; 


emissionForWeek[week] = emission; 


emit Emitted(week, emission); 


return emission; 


/// @notice extracts from the minted TAP 

/// @param _to Address to send the minted TAP to 

/// @param _amount TAP amount 

function extractTAP(address to, uint256 amount) external notPaused { 
require(msg.sender == minter, "unauthorized"); 


require(_amount > 0, "amount not valid"); 


uint256 week = _timestampToWeek(block.timestamp); 
require(emissionForWeek[week] >= _amount, "exceeds allowable amount"); 
_mint(_to, amount); 

mintedInWeek[week] += _amount; 


emit Minted(msg.sender, to, amount); 


/// @notice burns TAP 

/// @param _amount TAP amount 

function removeTAP(uint256 amount) external notPaused { 
_burn(msg.sender, amount); 


emit Burned(msg.sender, amount); 


///-- Internal methods -- 

function timestampToWeek( 
uint256 timestamp 

) internal view returns (uint256) { 


return ((timestamp - emissionsStartTime) / WEEK) + 1; // Starts at week 1 


///-- Private methods -- 

/// @notice Return the current chain ID. 

/// @dev Useful for testing. 

function getChainld() private view returns (uint256) { 


return block.chainid; 


/// @notice returns the available emissions for a given supply 
function computeEmission() internal view returns (uint256 result) { 


result = (dso_ supply * decay_rate) / DECAY_RATE_DECIMAL; 


----- E:/Train/makePDF/v1\tapioca-bar-audit-master\contracts/Penrose.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


import "@boringcrypto/boring-solidity/contracts/BoringOwnable.sol"; 


import "@boringcrypto/boring-solidity/contracts/BoringFactory.sol"; 


import "tapioca-sdk/dist/contracts/YieldBox/contracts/YieldBox.sol"; 

import "tapioca-sdk/dist/contracts/YieldBox/contracts/interfaces/lYieldBox.sol"; 

import "tapioca-sdk/dist/contracts/YieldBox/contracts/strategies/ERC20WithoutStrategy.sol"; 
import "tapioca-periph/contracts/interfaces/ISingularity.sol"; 


import "tapioca-periph/contracts/interfaces/IPenrose.sol"; 
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/// @title Global market registry 
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/// @notice Singularity & BigBang management 


/// @dev owner of all Singularity & BigBang markets 


///_ _- can execute actions on the registered markets 
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/// - also holds information about the common properties that are used by those markets 


contract Penrose is BoringOwnable, BoringFactory { 


/// @notice returns the Conservator address 

address public conservator; 

/// @notice returns the pause state of the contract 

bool public paused; 

/// @notice returns the YieldBox contract 

YieldBox public immutable yieldBox; 

/// @notice returns the TAP contract 

IERC20 public immutable tapToken; 

/// @notice returns TAP asset id registered in the YieldBox contract 
uint256 public immutable tapAssetld; 

/// @notice returns USDO contract 

IERC20 public usdoToken; 

/// @notice returns USDO asset id registered in the YieldBox contract 
uint256 public usdoAssetld; 

/// @notice returns the WETH contract 

IERC20 public immutable wethToken; 

/// @notice returns WETH asset id registered in the YieldBox contract 


uint256 public immutable wethAssetld; 


/// @notice Singularity master contracts 
IPenrose.MasterContract[] public singularityMasterContracts; 
/// @notice BigBang master contracts 


IPenrose.MasterContract[] public bigbangMasterContracts; 


// Used to check if a Singularity master contract is registered 


mapping(address => bool) public isSingularityMasterContractRegistered; 


// Used to check if a BigBang master contract is registered 
mapping(address => bool) public isBigBangMasterContractRegistered; 
// Used to check if a SGL/BB is a real market 


mapping(address => bool) public isMarketRegistered; 


/// @notice protocol fees 


address public feeTo; 


/// @notice whitelisted swappers 


mapping(ISwapper => bool) public swappers; 


/// @notice BigBang ETH market address 
address public bigBangEthMarket; 
/// @notice BigBang ETH market debt rate 


uint256 public bigBangEthDebtRate; 


/// @notice registered empty strategies 


mapping(address => |IStrategy) public emptyStrategies; 


/// @notice creates a Penrose contract 

/// @param _yieldBox YieldBox contract address 
/// @param tapToken_ TapOFT contract address 
/// @param wethToken_ WETH contract address 
/// @param _owner owner address 

constructor( 


YieldBox _yieldBox, 


IERC20 tapToken_, 
IERC20 wethToken_, 
address owner 

){ 
yieldBox = _yieldBox; 
tapToken = tapToken_; 


owner = _owner, 


emptyStrategies[address(tapToken_)] = IStrategy( 
address( 
new ERC20WithoutStrategy( 
lYieldBox(address(_yieldBox)), 


tapToken_ 


); 
tapAssetld = uint96( 
_yieldBox.registerAsset( 
TokenType.ERC20, 
address(tapToken_), 
emptyStrategies[address(tapToken_)], 


0 


wethToken = wethToken_; 


emptyStrategies[address(wethToken_)] = IStrategy( 
address( 
new ERC20WithoutStrategy( 
lYieldBox(address(_yieldBox)), 


wethToken_ 


); 
wethAssetld = uint96( 
_yieldBox.registerAsset( 
TokenType.ERC20, 
address(wethToken_), 
emptyStrategies[address(wethToken_)], 


0 


bigBangEthDebtRate = 5e15; 


// *** EVENTS *** // 
/// @notice event emitted when fees are extracted 
event ProtocolWithdrawal(IMarket[] markets, uint256 timestamp); 


/// @notice event emitted when Singularity master contract is registered 


event RegisterSingularityMasterContract( 
address location, 
IPenrose.ContractType risk 
); 
/// @notice event emitted when BigBang master contract is registered 
event RegisterBigBangMasterContract( 
address location, 
IPenrose.ContractType risk 
); 
/// @notice event emitted when Singularity is registered 
event RegisterSingularity(address location, address masterContract); 
/// @notice event emitted when BigBang is registered 
event RegisterBigBang(address location, address masterContract); 
/// @notice event emitted when feeTo address is updated 
event FeeToUpdate(address newFeeTo); 
/// @notice event emitted when ISwapper address is updated 
event SwapperUpdate(address swapper, bool isRegistered); 
/// @notice event emitted when USDO address is updated 
event UsdoTokenUpdated(address indexed usdoToken, uint256 assetld); 
/// @notice event emitted when conservator is updated 
event ConservatorUpdated(address indexed old, address indexed _new); 
/// @notice event emitted when pause state is updated 
event PausedUpdated(bool oldState, bool newState); 
/// @notice event emitted when BigBang ETH market address is updated 
event BigBangEthMarketSet(address indexed _newAddress); 


/// @notice event emitted when BigBang ETH market debt rate is updated 


event BigBangEthMarketDebtRate(uint256 rate); 
/// @notice event emitted when fees are deposited to YieldBox 


event LogYieldBoxFeesDeposit(uint256 feeShares, uint256 ethAmount); 


// *** MODIFIERS *** // 
modifier registeredSingularityMasterContract(address mc) { 
require( 
isSingularityMasterContractRegistered[mc] == true, 


"Penrose: MC not registered" 


modifier registeredBigBangMasterContract(address mc) { 
require( 
isBigBangMasterContractRegistered[mc] == true, 


"Penrose: MC not registered" 


modifier notPaused() { 


require(!paused, "Penrose: paused"); 


// *** VIEW FUNCTIONS *** // 
/// @notice Get all the Singularity contract addresses 
/// @return markets list of available markets 
function singularityMarkets() 

public 

view 


returns (address[] memory markets) 


markets = _getMasterContractLength(singularityMasterContracts); 


/// @notice Get all the BigBang contract addresses 
/// @return markets list of available markets 
function bigBangMarkets() public view returns (address[] memory markets) { 


markets = _getMasterContractLength(bigbangMasterContracts); 


/// @notice Get the length of *singularityMasterContracts 
function singularityMasterContractLength() public view returns (uint256) { 


return singularityMasterContracts.length; 


/// @notice Get the length of “bigbangMasterContracts* 
function bigBangMasterContractLength() public view returns (uint256) { 


return bigbangMasterContracts.length; 


// *** PUBLIC FUNCTIONS *** // 
/// @notice Loop through the master contracts and call ~_depositFeesToYieldBox()* to 
each one of their clones. 
/// @dev “swappers_~ can have one element that'll be used for all clones. Or one swapper 
per MasterContract. 
/// @dev Fees are withdrawn in TAP and sent to the FeeDistributor contract 
/// @param markets_ Singularity &/ BigBang markets array 
/// @param swappers_ one or more swappers to convert the asset to TAP. 
/// @param swapData_ swap data for each swapper 
function withdrawAllMarketFees( 
IMarket[] calldata markets_, 
ISwapper[] calldata swappers _, 
IPenrose.SwapData[] calldata swapData_ 
) public notPaused { 
require( 
markets_.length == swappers_.length && 
swappers_.length == swapData_.length, 


"Penrose: length mismatch" 


require(address(swappers [0]) != address(0), "Penrose: zero address"); 


require(address(markets [0]) != address(0), "Penrose: zero address"); 


_withdrawAllProtocolFees(Sswappers_, swapData_, markets _); 


emit ProtocolWithdrawal(markets_, block.timestamp); 


// *** OWNER FUNCTIONS *** // 

/// @notice sets the main BigBang market debt rate 

/// @dev can only be called by the owner 

/// @param _rate the new rate 

function setBigBangEthMarketDebtRate(uint256 rate) external onlyOwner { 
bigBangEthDebtRate = rate; 


emit BigBangEthMarketDebtRate(_rate); 


/// @notice sets the main BigBang market 

/// @dev needed for the variable debt computation 

function setBigBangEthMarket(address market) external onlyOwner { 
bigBangEthMarket = market; 


emit BigBangEthMarketSet(_market); 


/// @notice updates the pause state of the contract 

/// @dev can only be called by the conservator 

/// @param val the new value 

function updatePause(bool val) external { 
require(msg.sender == conservator, "Penrose: unauthorized"); 
require(val != paused, "Penrose: same state"); 
emit PausedUpdated(paused, val); 


paused = val; 


/// @notice Set the Conservator address 

[I| @dev Conservator can pause the contract 

/// @param _conservator The new address 

function setConservator(address conservator) external onlyOwner { 
require(_conservator != address(0), "Penrose: address not valid"); 
emit ConservatorUpdated(conservator, conservator); 


conservator = _conservator; 


/// @notice Set the USDO token 

/// @dev sets usdoToken and usdoAssetld 

/// | can only by called by the owner 

/// @param _usdoToken the USDO token address 

function setUsdoToken(address usdoToken) external onlyOwner { 


usdoToken = IERC20(_usdoToken); 


emptyStrategies[_ usdoToken] = |Strategy( 
address( 
new ERC20WithoutStrategy( 
lYieldBox(address(yieldBox)), 


IERC20(_usdoToken) 


); 
usdoAssetlid = uint96( 
yieldBox.registerAsset( 
TokenType.ERC20, 
_usdoToken, 
emptyStrategies[_usdoToken], 


0 


); 


emit UsdoTokenUpdated(_usdoToken, usdoAssetld); 


/// @notice Register a Singularity master contract 
/// @dev can only be called by the owner 
//| @param mcAddress The address of the contract 
/// @param contractType_ The risk type of the contract 
function registerSingularityMasterContract( 
address mcAddress, 


IPenrose.ContractType contractType_ 


) external onlyOwner { 
require( 
isSingularityMasterContractRegistered[mcAddress] == false, 


"Penrose: MC registered" 


IPenrose.MasterContract memory mc; 
mc.location = mcAddress; 

mc.risk = contractType _; 
singularityMasterContracts.push(mc); 


isSingularityMasterContractRegistered[mcAddress] = true; 


emit RegisterSingularityMasterContract(mcAddress, contractType_); 


/// @notice Register a BigBang master contract 
/// @dev can only be called by the owner 
//| @param mcAddress The address of the contract 
/// @param contractType_ The risk type of the contract 
function registerBigBangMasterContract( 

address mcAddress, 

IPenrose.ContractType contractType__ 
) external onlyOwner { 

require( 

isBigBangMasterContractRegistered[mcAddress] == false, 


"Penrose: MC registered" 


IPenrose.MasterContract memory mc; 
mc.location = mcAddress; 

mc.risk = contractType _; 
bigbangMasterContracts.push(mc); 


isBigBangMasterContractRegistered[mcAddress] = true; 


emit RegisterBigBangMasterContract(mcAddress, contractType_); 


/// @notice Registers a Singularity market 
/// @dev can only be called by the owner 
/// @param mc The address of the master contract which must be already registered 
/// @param data The init data of the Singularity 
/// @param useCreate2 Whether to use create2 or not 
function registerSingularity( 
address mc, 
bytes calldata data, 


bool useCreate2 


external 

payable 

onlyOwner 
registeredSingularityMasterContract(mc) 


returns (address _contract) 


_contract = deploy(mc, data, useCreate2); 
isMarketRegistered[_contract] = true; 


emit RegisterSingularity(_contract, mc); 


/// @notice Registers an existing Singularity market (without deployment) 
/// @dev can only be called by the owner 
/// @param mc The address of the master contract which must be already registered 
function addSingularity( 
address mc, 
address contract 
) external onlyOwner registeredSingularityMasterContract(mc) { 
isMarketRegistered[_contract] = true; 
clonesOf[mc].push(_contract); 


emit RegisterSingularity(_contract, mc); 


/// @notice Registers a BigBang market 
/// @dev can only be called by the owner 
/// @param mc The address of the master contract which must be already registered 
/// @param data The init data of the BigBang contract 
/// @param useCreate2 Whether to use create2 or not 
function registerBigBang( 
address mc, 


bytes calldata data, 


bool useCreate2 


external 

payable 

onlyOwner 
registeredBigBangMasterContract(mc) 


returns (address contract) 


_contract = deploy(mc, data, useCreate2); 
isMarketRegistered[_contract] = true; 


emit RegisterBigBang(_contract, mc); 


/// @notice Registers an existing BigBang market (without deployment) 
/// @dev can only be called by the owner 
/// @param mc The address of the master contract which must be already registered 
function addBigBang( 
address mc, 
address _contract 
) external onlyOwner registeredBigBangMasterContract(mc) { 
isMarketRegistered[_contract] = true; 
clonesOf[mc].push(_contract); 


emit RegisterBigBang(_contract, mc); 


/// @notice Execute an only owner function inside of a Singularity or a BigBang market 


function executeMarketFn( 
address[] calldata mc, 
bytes[] memory data, 


bool forceSuccess 


external 
onlyOwner 
notPaused 


returns (bool[] memory success, bytes[] memory result) 


uint256 len = mc.length; 
success = new bool[](len); 
result = new bytes[](len); 
for (uint256 i = 0; i < len; ) { 
require( 
isSingularityMasterContractRegistered[ 
masterContractOf[mcli]] 
] || isBigBangMasterContractRegistered[masterContractOf[mc[i]]], 
"Penrose: MC not registered" 
); 
(success[i], result[i]) = mc[i].call(datali]); 
if (forceSuccess) { 


require(success[i], getRevertMsg(result[i])); 


++i; 


/// @notice Set protocol fees address 

/// @dev can only be called by the owner 

/// @param feeTo_ the new feeTo address 

function setFeeTo(address feeTo_) external onlyOwner { 
feeTo = feeTo ; 


emit FeeToUpdate(feeTo_); 


/// @notice Used to register and enable or disable swapper contracts used in closed 
liquidations. 
/// @dev can only be called by the owner 
[I| @param swapper The address of the swapper contract that conforms to ‘ISwapper. 
/// @param enable True to enable the swapper. To disable use False. 
function setSwapper(ISwapper swapper, bool enable) external onlyOwner { 
swappers[swapper] = enable; 


emit SwapperUpdate(address(swapper), enable); 


// *** PRIVATE FUNCTIONS *** // 
function getRevertMsg( 
bytes memory _returnData 


) private pure returns (string memory) { 


// If the _res length is less than 68, then the transaction failed silently (without a revert 
message) 
if (_returnData.length < 68) return "SGL: no return data"; 
// solhint-disable-next-line no-inline-assembly 
assembly { 
// Slice the sighash. 
_returnData := add(_returnData, 0x04) 
} 


return abi.decode(_returnData, (string)); // All that remains is the revert string 


function _withdrawAllProtocolFees( 
ISwapper[] calldata swappers_, 
IPenrose.SwapData[] calldata swapData_, 
IMarket[] memory markets_ 
) private { 
uint256 length = markets_.length; 
unchecked { 
for (uint256 i = 0; i < length; ) { 
_depositFeesToYieldBox(markets [i], swappers [i], swapData [i]); 


++i; 


/// @notice Withdraw the balance of “feeTo’, swap asset into TAP and deposit it to 


yieldBox of `feeTo` 
function depositFeesToYieldBox( 
IMarket market, 
ISwapper swapper, 
IPenrose.SwapData calldata dexData 
) private { 
require(Swappers[Swapper], "Penrose: Invalid swapper"); 


require(isMarketRegistered[address(market)], "Penrose: Invalid market"); 


uint256 feeShares = market.refreshPenroseFees(feeTo); 


if (feeShares == 0) return; 


uint256 assetid = market.assetld(); 
uint256 amount = 0; 
if (assetlId != wethAssetld) { 
yieldBox.transfer( 
address(this), 
address(swapper), 
assetld, 


feeShares 


ISwapper.SwapData memory swapData = swapper.buildSwapData( 
assetld, 
wethAssetld, 


0, 


feeShares, 
true, 
true 

); 

(amount, ) = swapper.swap( 
swapData, 
dexData.minAssetAmount, 
feeTo, 

); 

} else { 


yieldBox.transfer(address(this), feeTo, assetid, feeShares); 


emit LogYieldBoxFeesDeposit(feeShares, amount); 


function getMasterContractLength( 
IPenrose.MasterContract[] memory array 

) public view returns (address[] memory markets) { 
uint256 _masterContractLength = array.length; 


uint256 marketsLength = 0; 


unchecked { 
// We first compute the length of the markets array 


for (uint256 i = 0; i <_masterContractLength; ) { 


marketsLength += clonesOfCount(array[i].location); 


++i; 


markets = new address[](marketsLength); 


uint256 marketIndex; 


uint256 clonesOfLength; 


unchecked { 
// We populate the array 
for (uint256 i = 0; i < _masterContractLength; ) { 
address mcLocation = array[i].location; 


clonesOfLength = clonesOfCount(mcLocation); 


// Loop through clones of the current MC. 

for (uint256 j = 0; j < clonesOfLength; ) { 
markets[marketIndex] = clonesOf[mcLocation][j]; 
++marketIndex; 


++); 


++i; 


----- E:/Train/makePDF/v1\tapioca-bar-audit-master\contracts/Test.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


contract Test { 


uint256 public x = 1; 


----- E:/Train/makePDF/v1\tapioca-bar-audit-master\contracts\markets/Market.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


import "@boringcrypto/boring-solidity/contracts/BoringOwnable.sol"; 


import "@boringcrypto/boring-solidity/contracts/libraries/BoringRebase.sol"; 


import "tapioca-sdk/dist/contracts/YieldBox/contracts/YieldBox.sol"; 
import "tapioca-periph/contracts/interfaces/lOracle.sol"; 
import "tapioca-periph/contracts/interfaces/IPenrose.sol"; 


import "./MarketERC20.sol"; 


/// @title Market contract 
/// @notice Market contract implemented by Singularity & BigBang 
abstract contract Market is MarketERC20, BoringOwnable { 


using RebaseLibrary for Rebase; 


// *** VARS *** // 

/// @notice returns YieldBox address 
YieldBox public yieldBox; 

/// @notice returns Penrose address 


IPenrose public penrose; 


/// @notice collateral token address 


IERC20 public collateral; 

/// @notice collateral token YieldBox id 
uint256 public collateralld; 

/// @notice asset token address 
IERC20 public asset; 

/// @notice asset token YieldBox id 


uint256 public assetld; 


/// @notice contract's pause state 

bool public paused; 

/// @notice conservator's addresss 

/// @dev conservator can pause/unpause the contract 


address public conservator; 


/// @notice oracle address 

lOracle public oracle; 

/// @notice oracleData 

bytes public oracleData; 

/// @notice Exchange and interest rate tracking. 

/// This is 'cached' here because calls to Oracles can be very expensive. 
/// Asset -> collateral = assetAmount * exchangeRate. 


uint256 public exchangeRate; 


/// @notice total amount borrowed 
/// @dev elastic = Total token amount to be repayed by borrowers, base = Total parts of 


the debt held by borrowers 


Rebase public totalBorrow; 

/// @notice total collateral supplied 

uint256 public totalCollateralShare; 

/// @notice max borrow cap 

uint256 public totalBorrowCap; 

/// @notice borrow amount per user 
mapping(address => uint256) public userBorrowPart; 
/// @notice collateral share per user 


mapping(address => uint256) public userCollateralShare; 


/// @notice liquidation caller rewards 

uint256 public callerFee; // 90% 

/// @notice liquidation protocol rewards 

uint256 public protocolFee; // 10% 

/// @notice min % a liquidator can receive in rewards 
uint256 public minLiquidatorReward = 1e3; //1% 

/// @notice max % a liquidator can receive in rewards 
uint256 public maxLiquidatorReward = 1e4; //10% 
/// @notice max liquidatable bonus amount 

[I| @dev max % added to the amount that can be liquidated 
uint256 public liquidationBonusAmount = 1e4; //10% 
/// @notice collateralization rate 

uint256 public collateralizationRate; // 75% 

/// @notice borrowing opening fee 

uint256 public borrowOpeningFee = 50; //0.05% 


/// @notice liquidation multiplier used to compute liquidator rewards 


uint256 public liquidationMultiplier = 12000; //12% 


// *** CONSTANTS *** // 
uint256 internal EXCHANGE RATE PRECISION; //not costant, but can only be set in the 
‘init’ method 
uint256 internal constant FEE PRECISION = 1e5; 


uint256 internal constant FEE_PRECISION DECIMALS = 5; 


[| *** EVENTS *** // 

/// @notice event emitted when conservator is updated 

event ConservatorUpdated(address indexed old, address indexed _new); 
/// @notice event emitted when pause state is changed 

event PausedUpdated(bool oldState, bool newState); 

/// @notice event emitted when cached exchange rate is updated 
event LogExchangeRate(uint256 rate); 

/// @notice event emitted when borrow cap is updated 

event LogBorrowCapUpdated(uint256 _oldVal, uint256 newVal); 
/// @notice event emitted when oracle data is updated 

event OracleDataUpdated(); 

/// @notice event emitted when oracle is updated 

event OracleUpdated(); 


/// @notice event emitted when a position is liquidated 


event Liquidated( 
address liquidator, 
address[] users, 
uint256 liquidatorReward, 
uint256 protocolReward, 
uint256 repayedAmount, 
uint256 collateralShareRemoved 
); 
/// @notice event emitted when borrow opening fee is updated 
event LogBorrowingFee(uint256 oldVal, uint256 newvVal); 
/// @notice event emitted when the liquidation multiplier rate is updated 


event LiquidationMultiplierUpdated(uint256 oldVal, uint256 newVal); 


modifier notPaused() { 


require(!paused, "Market: paused"); 


} 
/// @dev Checks if the user is solvent in the closed liquidation case at the end of the 
function body. 
modifier solvent(address from) { 
updateExchangeRate(); 


_accrue(); 


require(_isSolvent(from, exchangeRate), "Market: insolvent"); 


bool internal initialized; 
modifier onlyOnce() { 
require(tinitialized, "Market: initialized"); 


r 


initialized = true; 


// *** OWNER FUNCTIONS *** // 

/// @notice sets the borrowing opening fee 

/// @dev can only be called by the owner 

/// @param _val the new value 

function setBorrowOpeningFee(uint256 val) external onlyOwner { 
require(_val <= FEE PRECISION, "Market: not valid"); 
emit LogBorrowingFee(borrowOpeningFee, _val); 


borrowOpeningFee = val; 


/// @notice sets max borrowable amount 

/// @dev can only be called by the owner 

/// @param _cap the new value 

function setBorrowCap(uint256 cap) external notPaused onlyOwner { 


emit LogBorrowCapUpdated(totalBorrowCap, cap); 


totalBorrowCap = cap; 


/// @notice sets common market configuration 
/// @dev values are updated only if > 0 or not address(0) 
function setMarketConfig( 
uint256 _borrowOpeningFee, 
lOracle _oracle, 
bytes calldata _oracleData, 
address conservator, 
uint256 _callerFee, 
uint256 _protocolFee, 
uint256 _liquidationBonusAmount, 
uint256 _minLiquidatorReward, 
uint256 _maxLiquidatorReward, 
uint256 totalBorrowCap, 
uint256 collateralizationRate 
) external onlyOwner { 
if (_ borrowOpeningFee > 0) { 
require(_borrowOpeningFee <= FEE_PRECISION, "Market: not valid"); 
emit LogBorrowingFee(borrowOpeningFee, _borrowOpeningFee); 


borrowOpeningFee = _borrowOpeningFee; 


if (address(_ oracle) != address(0)) { 


oracle = _oracle; 


emit OracleUpdated(); 


if (_oracleData.length > 0) { 
oracleData = _oracleData; 


emit OracleDataUpdated(); 


if (conservator != address(0)) { 
emit ConservatorUpdated(conservator, conservator); 


conservator = _conservator; 


if (_callerFee > 0) { 
require(_callerFee <= FEE PRECISION, "Market: not valid"); 


callerFee = _callerFee; 


if (_protocolFee > 0) { 
require(_protocolFee <= FEE PRECISION, "Market: not valid"); 


protocolFee = _protocolFee; 


if (_liquidationBonusAmount > 0) { 
require( 


_liquidationBonusAmount < FEE_PRECISION, 


"Market: not valid" 
); 


liquidationBonusAmount = _liquidationBonusAmount; 


if (_minLiquidatorReward > 0) { 
require(_minLiquidatorReward < FEE_PRECISION, "Market: not valid"); 
require( 
_minLiquidatorReward < maxLiquidatorReward, 
"Market: not valid" 
); 


minLiquidatorReward = _minLiquidatorReward; 


if (_maxLiquidatorReward > 0) { 
require(_maxLiquidatorReward < FEE PRECISION, "Market: not valid"); 
require( 
_maxLiquidatorReward > minLiquidatorReward, 
"Market: not valid" 
); 


maxLiquidatorReward = _maxLiquidatorReward; 


if (_ totalBorrowCap > 0) { 
emit LogBorrowCapUpdated(totalBorrowCap, totalBorrowCap); 


totalBorrowCap = _totalBorrowCap; 


if (_collateralizationRate > 0) { 
require( 
_collateralizationRate <= FEE PRECISION, 
"Market: not valid" 
); 


collateralizationRate = _collateralizationRate; 


/// @notice updates the pause state of the contract 

/// @dev can only be called by the conservator 

/// @param val the new value 

function updatePause(bool val) external { 
require(msg.sender == conservator, "Market: unauthorized"); 
require(val != paused, "Market: same state"); 
emit PausedUpdated(paused, val); 


paused = val; 


// *** VIEW FUNCTIONS *** // 


/// @notice returns the maximum liquidatable amount for user 


function computeClosingFactor( 


uint256 borrowPart, 
uint256 collateralPartInAsset, 
uint256 borrowPartDecimals, 
uint256 collateralPartDecimals, 
uint256 ratesPrecision 
) public view returns (uint256) { 
uint256 borrowPartScaled = borrowPart; 
if (borrowPartDecimals > 18) { 
borrowPartScaled = borrowPart / (10 ** (borrowPartDecimals - 18)); 
} 
if (borrowPartDecimals < 18) { 


borrowPartScaled = borrowPart * (10 ** (18 - borrowPartDecimals)); 


uint256 collateralPartInAssetScaled = collateralPartInAsset; 
if (collateralPartDecimals > 18) { 
collateralPartInAssetScaled = 
collateralPartInAsset / 
(10 ** (collateralPartDecimals - 18)); 
} 
if (collateralPartDecimals < 18) { 
collateralPartInAssetScaled = 
collateralPartInAsset * 


(10 ** (18 - collateralPartDecimals)); 


uint256 liquidationStartsAt = (collateralPartInAssetScaled * 
collateralizationRate) / (10 ** ratesPrecision); 


if (borrowPartScaled < liquidationStartsAt) return 0; 


uint256 numerator = borrowPartScaled - 
((collateralizationRate * collateralPartInAssetScaled) / 
(10 ** ratesPrecision)); 
uint256 denominator = ((10 ** ratesPrecision) - 
(collateralizationRate * 
((10 ** ratesPrecision) + liquidationMultiplier)) / 


(10 ** ratesPrecision)) * (10 ** (18 - ratesPrecision)); 


uint256 x = (numerator * 1e18) / denominator; 


return x; 


/// @notice return the amount of collateral for a “user to be solvent, min TVL and max 


TVL. Returns 0 if user already solvent. 


/// @dev we use a ‘CLOSED_COLLATERIZATION RATE’ that is a safety buffer when making 


the user solvent again, 


III to prevent from being liquidated. This function is valid only if user is not solvent by 
` isSolvent()`. 
/// @param user The user to check solvency. 
/// @param _exchangeRate the exchange rate asset/collateral. 


/// @return amountToSolvency the amount of collateral to be solvent. 


function computeTVLInfo( 


address user, 


uint256 _exchangeRate 


public 
view 


returns (uint256 amountToSolvency, uint256 minTVL, uint256 maxTVL) 


uint256 borrowPart = userBorrowPart[user]; 


if (borrowPart == 0) return (0, O, 0); 


Rebase memory _totalBorrow = totalBorrow; 


uint256 collateralAmountInAsset = _computeMaxBorrowableAmount( 
user, 


_exchangeRate 


borrowPart = (borrowPart * totalBorrow.elastic) /_totalBorrow.base; 


amountToSolvency = borrowPart >= collateralAmountInAsset 
? borrowPart - collateralAmountinAsset 


: 0; 


(minTVL, maxTVL) = _computeMaxAndMinLTVInAsset( 
userCollateralShare[user], 


_exchangeRate 


/// @notice Gets the exchange rate. l.e how much collateral to buy 1e18 asset. 

/// @dev This function is supposed to be invoked if needed because Oracle queries can be 
expensive. 

/// Oracle should consider USDO at 1$ 

/// @return updated True if ~“exchangeRate’ was updated. 

/// @return rate The new exchange rate. 

function updateExchangeRate() public returns (bool updated, uint256 rate) { 


(updated, rate) = oracle.get(""); 


if (updated) { 
require(rate > 0, "Market: invalid rate"); 
exchangeRate = rate; 
emit LogExchangeRate(rate); 
} else { 
// Return the old rate if fetching wasn't successful 


rate = exchangeRate; 


/// @notice computes the possible liquidator reward 
/// @notice user the user for which a liquidation operation should be performed 
/// @param _exchangeRate the exchange rate asset/collateral to use for internal 


computations 


function computeLiquidatorReward( 
address user, 
uint256 _exchangeRate 
) public view returns (uint256) { 
(uint256 minTVL, uint256 maxTVL) = _computeMaxAndMinLTVInAsset( 
userCollateralShare[user], 
_exchangeRate 
); 


return _getCallerReward(userBorrowPart[user], minTVL, maxTVL); 


// *** INTERNAL FUNCTIONS *** // 


function _accrue() internal virtual; 


function getRevertMsg( 
bytes memory _returnData 
) internal pure returns (string memory) { 
// If the _res length is less than 68, then the transaction failed silently (without a revert 
message) 
if (_returnData.length < 68) return "Market: no return data"; 
// solhint-disable-next-line no-inline-assembly 
assembly { 
// Slice the sighash. 


_returnData := add(_returnData, 0x04) 


} 


return abi.decode(_returnData, (string)); // All that remains is the revert string 


function computeMaxBorrowableAmount( 
address user, 
uint256 _exchangeRate 
) internal view returns (uint256 collateralAmountinAsset) { 
collateralAmountinAsset = 
yieldBox.toAmount( 

collateralld, 

(userCollateralShare[user] * 
(EXCHANGE_RATE_PRECISION / FEE_PRECISION) * 
collateralizationRate), 

false 

)/ 


_exchangeRate; 


/// @notice Concrete implementation of `isSolvent`. Includes a parameter to allow caching 
“exchangeRate . 
[Il @param _exchangeRate The exchange rate. Used to cache the `exchangeRate` 
between calls. 
function _isSolvent( 
address user, 


uint256 _exchangeRate 


) internal view returns (bool) { 
// accrue must have already been called! 
uint256 borrowPart = userBorrowPart[user]; 
if (borrowPart == 0) return true; 
uint256 collateralShare = userCollateralShare[user]; 


if (collateralShare == QO) return false; 


Rebase memory _totalBorrow = totalBorrow; 


return 
yieldBox.toAmount( 
collateralld, 
collateralShare * 
(EXCHANGE_RATE_PRECISION / FEE_PRECISION) * 
collateralizationRate, 
false 
)>= 
// Moved exchangeRate here instead of dividing the other side to preserve more 
precision 
(borrowPart * totalBorrow.elastic * exchangeRate) / 


_totalBorrow.base; 


/// @notice Returns the min and max LTV for user in asset price 
function computeMaxAndMinLTVInAsset( 


uint256 collateralShare, 


uint256 _exchangeRate 
) internal view returns (uint256 min, uint256 max) { 
uint256 collateralAmount = yieldBox.toAmount( 
collateralld, 
collateralShare, 


false 


max = (collateralAmount * EXCHANGE RATE PRECISION) / exchangeRate; 


min = (max * collateralizationRate) / FEE_PRECISION; 


function _getCallerReward( 
uint256 borrowed, 
uint256 startTVLInAsset, 
uint256 maxTVLInAsset 

) internal view returns (uint256) { 
if (borrowed == 0) return 0; 


if (SstartTVLINAsset == 0) return 0; 


if (borrowed < startTVLInAsset) return 0; 


if (borrowed >= maxTVLIinAsset) return minLiquidatorReward; 


uint256 rewardPercentage = ((borrowed - startTVLInAsset) * 


FEE PRECISION) / (maxTVLInAsset - startTVLInAsset); 


int256 diff = int256(minLiquidatorReward) - int256(maxLiquidatorReward); 
int256 reward = (diff * int256(rewardPercentage)) / 
int256(FEE_PRECISION) + 


int256(maxLiquidatorReward); 


return uint256(reward); 


function computeAllowanceAmountinAsset( 
address user, 
uint256 _exchangeRate, 
uint256 borrowAmount, 
uint256 assetDecimals 
) internal view returns (uint256) { 


uint256 maxBorrowabe = computeMaxBorrowableAmount(user, _exchangeRate); 


uint256 shareRatio = _getRatio( 
borrowAmount, 
maxBorrowabe, 
assetDecimals 

); 


return (shareRatio * userCollateralShare[user]) / (10 ** assetDecimals); 


function _getRatio( 


uint256 numerator, 


uint256 denominator, 
uint256 precision 
) private pure returns (uint256) { 
if (numerator == 0 || denominator == 0) { 
return 0; 
} 
uint256 numerator = numerator * 10 ** (precision + 1); 
uint256 quotient = ((_numerator / denominator) + 5) / 10; 


return (_quotient); 


----- E:/Train/makePDF/v1\tapioca-bar-audit-master\contracts\markets/MarketERC20.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


import {IERC20} from "@boringcrypto/boring-solidity/contracts/ERC20.sol"; 
import {IERC20Permit} from 
"@openzeppelin/contracts/token/ERC20/extensions/draft-ERC20Permit.sol"; 
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/// @title Market ERC20 contract 
/// @notice Market ERC20 capabilitites 
contract MarketERC20 is IERC20, IERC20Permit, EIP712 { 


// *** VARS *** // 
// solhint-disable-next-line var-name-mixedcase 
bytes32 private constant PERMIT _TYPEHASH = 
keccak256( 
"Permit(address owner,address spender,uint256 value,uint256 nonce,uint256 
deadline)" 
); 


bytes32 private constant PERMIT _TYPEHASH BORROW = 


keccak256( 
"PermitBorrow(address owner,address spender,uint256 value,uint256 nonce,uint256 
deadline)" 


); 


[** 

* @dev In previous versions `_PERMIT_TYPEHASH` was declared as ‘immutable’. 

* However, to ensure consistency with the upgradeable transpiler, we will continue 
* to reserve a slot. 

* @custom:oz-renamed-from _PERMIT_TYPEHASH 

*/ 

// solhint-disable-next-line var-name-mixedcase 


bytes32 private PERMIT _TYPEHASH DEPRECATED SLOT; 


/// @notice owner > balance mapping. 

mapping(address => uint256) public override balanceOf; 

/// @notice owner > spender > allowance mapping. 

mapping(address => mapping(address => uint256)) public override allowance; 
/// @notice owner > spender > allowance mapping. 

mapping(address => mapping(address => uint256)) public allowanceBorrow; 
/// @notice owner > nonce mapping. Used in “permit. 


mapping(address => uint256) private _nonces; 


[1 *** ERRORS *** // 


/// @notice error thrown when operation is not approved 


error NotApproved(address from, address operator); 


[| *** EVENTS *** // 
/// @notice event emitted when borrow approval is performed 
event ApprovalBorrow( 

address indexed owner, 

address indexed spender, 


uint256 value 


// *** MODIFIERS *** // 
function allowedLend(address from, uint share) internal { 
if (from != msg.sender) { 
if (allowance[from][msg.sender] < share) { 
revert NotApproved(from, msg.sender); 
} 


allowance[from][msg.sender] -= share; 


function _allowedBorrow(address from, uint share) internal { 


if (from != msg.sender) { 
if (allowanceBorrow[from][msg.sender] < share) { 
revert NotApproved(from, msg.sender); 


} 


allowanceBorrow|[from][msg.sender] -= share; 


/// Check if msg.sender has right to execute Lend operations 
modifier allowedLend(address from, uint share) virtual { 


_allowedLend(from, share); 


} 


/// Check if msg.sender has right to execute borrow operations 
modifier allowedBorrow(address from, uint share) virtual { 


_allowedBorrow(from, share); 


[** 
* @dev Initializes the {EIP712} domain separator using the “name> parameter, and 
setting ‘version’ to ~"1">. 
* 
* It's a good idea to use the same ‘name that is defined as the ERC20 token name. 
*/ 


constructor(string memory name) EIP712(name, "1") {} 


// *** VIEW FUNCTIONS *** // 


function totalSupply() public view virtual override returns (uint256) {} 


function nonces(address owner) public view returns (uint256) { 


return _nonces[owner]; 


[** 

* @dev See {IERC20Permit-DOMAIN_ SEPARATOR}. 

*/ 

// solhint-disable-next-line func-name-mixedcase 

function DOMAIN _SEPARATOR() external view override returns (bytes32) { 


return _domainSeparatorV4(); 


// *** PUBLIC FUNCTIONS *** // 

/// @notice Transfers `amount` tokens from “msg.sender to “to. 
//| @param to The address to move the tokens. 

/// @param amount of the tokens to move. 

/// @return (bool) Returns True if succeeded. 


function transfer( 


address to, 
uint256 amount 
) public virtual returns (bool) { 
// \f “amount is 0, or `msg.sender` is ‘to’ nothing happens 
if (amount != 0 || msg.sender == to) { 
uint256 srcBalance = balanceOf[msg.sender]; 
require(srcBalance >= amount, "ERC20: balance too low"); 
if (msg.sender != to) { 
require(to != address(0), "ERC20: no zero address"); // Moved down so low 


balance calls safe some gas 


balanceOf[msg.sender] = srcBalance - amount; // Underflow is checked 


balanceOf[to] += amount; 


} 
emit Transfer(msg.sender, to, amount); 


return true; 


/// @notice Transfers “amount tokens from `from`ò to ‘to’. Caller needs approval for 
‘from’. 
//1 @param from Address to draw tokens from. 
//| @param to The address to move the tokens. 
/// @param amount The token amount to move. 
/// @return (bool) Returns True if succeeded. 


function transferFrom( 


address from, 
address to, 
uint256 amount 
) public virtual returns (bool) { 
// \f “amount is 0, or “from is “to” nothing happens 
if (amount != 0) { 
uint256 srcBalance = balanceOf[from]; 


require(srcBalance >= amount, "ERC20: balance too low"); 


if (from != to) { 
uint256 spenderAllowance = allowance[from][msg.sender]; 
// \f allowance is infinite, don't decrease it to save on gas (breaks with EIP-20). 
if (soenderAllowance != type(uint256).max) { 
require( 
spenderAllowance >= amount, 


"ERC20: allowance too low" 


allowance[from][msg.sender] = spenderAllowance - amount; // Underflow is 
checked 
} 
require(to != address(0), "ERC20: no zero address"); // Moved down so other failed 


calls safe some gas 


balanceOf[from] = srcBalance - amount; // Underflow is checked 


balanceOf[to] += amount; 


} 
emit Transfer(from, to, amount); 


return true; 


/// @notice Approves “amount from sender to be spend by ‘spender’. 
/// @param spender Address of the party that can draw from msg.sender's account. 
/// @param amount The maximum collective amount that “spender can draw. 
/// @return (bool) Returns True if approved. 
function approve( 
address spender, 
uint256 amount 
) public override returns (bool) { 
_approve(msg.sender, spender, amount); 


return true; 


function approveBorrow( 
address spender, 
uint256 amount 

) public returns (bool) { 
_approveBorrow(msg.sender, spender, amount); 


return true; 


[** 


* @dev See {IERC20Permit-permit}. 
*/ 
function permit( 
address owner, 
address spender, 
uint256 value, 
uint256 deadline, 
uint8 v, 
bytes32 r, 
bytes32 s 
) external virtual override(IERC20, IERC20Permit) { 


_permit(true, owner, spender, value, deadline, v, r, s); 


function permitBorrow( 
address owner, 
address spender, 
uint256 value, 
uint256 deadline, 
uint8 v, 
bytes32 r, 
bytes32 s 

) external virtual { 


_permit(false, owner, spender, value, deadline, v, r, s); 


// *** PRIVATE FUNCTIONS *** // 


[** 
* @dev "Consume a nonce": return the current value and increment. 
* 
* Available since v4.1._ 
*/ 
function useNonce( 
address owner 
) internal virtual returns (uint256 current) { 


current = _nonces[owner]++; 


function _permit( 
bool asset, // 1 = asset, 0 = collateral 
address owner, 
address spender, 
uint256 value, 
uint256 deadline, 
uint8 v, 
bytes32 r, 
bytes32 s 
) internal { 


require(block.timestamp <= deadline, "ERC20Permit: expired deadline"); 


bytes32 structHash = keccak256( 
abi.encode( 
asset ?_PERMIT_TYPEHASH :_PERMIT_TYPEHASH BORROW, 
owner, 
spender, 
value, 
_useNonce(owner), 


deadline 


bytes32 hash = _hashTypedDataV4(structHash); 


address signer = ECDSA.recover(hash, v, r, s); 


require(Signer == owner, "ERC20Permit: invalid signature"); 


if (asset) { 
_approve(owner, spender, value); 
} else { 


_approveBorrow(owner, spender, value); 


function approveBorrow( 


address owner, 


address spender, 
uint256 amount 
) internal { 
allowanceBorrow[owner][spender] = amount; 


emit ApprovalBorrow(owner, spender, amount); 


function approve(address owner, address spender, uint256 amount) internal { 
allowance[owner][spender] = amount; 


emit Approval(owner, spender, amount); 


----- E:/Train/makePDF/v1\tapioca-bar-audit-master\contracts\markets\bigBang/BigBang.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


import "@boringcrypto/boring-solidity/contracts/BoringOwnable.sol"; 


import "@boringcrypto/boring-solidity/contracts/ERC20.sol"; 


import "tapioca-periph/contracts/interfaces/IBigBang.sol"; 


import "tapioca-periph/contracts/interfaces/ISendFrom.sol"; 


import "tapioca-periph/contracts/interfaces/ISwapper.sol"; 


import {IUSDOBase} from "tapioca-periph/contracts/interfaces/IUSDO.sol"; 


import "../Market.sol"; 


// solhint-disable max-line-length 


/ x 
_/\\\\\\\\\\\\ /\\\\\\\\ /A\\\\\\\\\\\\___/\\\\\\\\\ \\\\\ /\\\\\\\\ /\\\\\\\\ 
w 
NVAHLNNLANW WWA AAAA MW. M\W/M\\ AVLANAN 
V\\\ ANVAN ANAN V\\\ VA\\ \V_\V/M\\___W. I\W//1 
HHN 


V\\\ VA\\ VAM_VAAAY. VA\\ /\\ VM\\_M\\ VA\\\_ 


AVA\\ 


V\\\ VAAL VAV////////. VAN V\\\ V\\\_VAM, VAM\\\ 
WAAL 

V\\\ AWM AAN V\\\ VA\\ \\\_V/A\\ \VAW 
HHHH 

V\\\ VA\\ VANAN V\\\ V/NM\\_/\ VIN \\ 
\\ AVAN\ 

V\\\ \A\\ VANAN AAAA i OAW V//A\\\\\\_V\\\__ 
__\V\\\ 

VII VII V/I_NII VIII V/I VII __NII 

VII 

*/ 


/// @title BigBang market 

/// @notice Adaptation of the Singularity contract 

III @dev owner of the contract is Penrose 

/// _- the borrow action performs a mint on USDO 

/// -the repay action performs a burn on USDO 

III - interest rate is not fixed, but dynamic based on the main BigBang market, 


minDebtRate, maxDebtRate and debtRateAgainstEthMarket 


III - BigBang markets can either be main or secondary markets; the main market is set 
on Penrose and has a fixed rate 
III - BigBang secondary markets has a dynamic interest rate which is starts from 
`minDebtRate` to `maxDebtRate` 
III - if current debt is over _maxDebtPoint = (_ethMarketTotalDebt * 
debtRateAgainstEthMarket) / 1e18, the interest rate is automatically `maxDebtRate` 
IH - simulation: https://dotnetfiddle.net/cuKVpf 
contract BigBang is BoringOwnable, Market { 

using RebaseLibrary for Rebase; 


using BoringERC20 for IERC20; 


mapping(address => mapping(address => bool)) public operators; 


IBigBang.Accruelnfo public accruelnfo; 


uint256 public totalFees; 


bool private _isEthMarket; 

uint256 public maxDebtRate; 

uint256 public minDebtRate; 

uint256 public debtRateAgainstEthMarket; 
uint256 public debtStartPoint; 


uint256 private constant DEBT_PRECISION = 1e18; 


// *** EVENTS *** // 
/// @notice event emitted when accrue is called 
event LogAccrue(uint256 accruedAmount, uint64 rate); 
/// @notice event emitted when collateral is added 
event LogAddCollateral( 

address indexed from, 

address indexed to, 

uint256 share 
); 
/// @notice event emitted when collateral is removed 
event LogRemoveCollateral( 

address indexed from, 

address indexed to, 

uint256 share 
); 
/// @notice event emitted when borrow is performed 
event LogBorrow( 

address indexed from, 

address indexed to, 

uint256 amount, 

uint256 feeAmount, 


uint256 part 


/// @notice event emitted when a repay operation is performed 
event LogRepay( 

address indexed from, 

address indexed to, 

uint256 amount, 

uint256 part 
); 
/// @notice event emitted when the minimum debt rate is updated 
event MinDebtRateUpdated(uint256 oldVal, uint256 newVal); 
/// @notice event emitted when the maximum debt rate is updated 
event MaxDebtRateUpdated(uint256 oldVal, uint256 newVal); 
/// @notice event emitted when the debt rate against the main market is updated 


event DebtRateAgainstEthUpdated(uint256 oldVal, uint256 newVal); 


constructor() MarketERC20("Tapioca BigBang") {} 


/// @notice The init function that acts as a constructor 
function init(bytes calldata data) external onlyOnce { 
( 

IPenrose tapiocaBar_, 

IERC20 collateral, 

uint256 collateralld, 

lOracle _oracle, 

uint256 exchangeRatePrecision, 

uint256_ debtRateAgainstEth, 


uint256_ debtRateMin, 


uint256_ debtRateMax, 
uint256 debtStartPoint 
) = abi.decode( 
data, 
( 
IPenrose, 
IERC20, 
uint256, 
lOracle, 
uint256, 
uint256, 
uint256, 
uint256, 


uint256 


penrose = tapiocaBar ; 
yieldBox = YieldBox(tapiocaBar_.yieldBox()); 


owner = address(penrose); 


address _asset = penrose.usdoToken(); 


require( 


address(_collateral) != address(0) && 


address(_asset) != address(0) && 


address(_oracle) != address(0), 


"BigBang: bad pair" 


asset = IERC20(_asset); 

assetid = penrose.usdoAssetld(); 
collateral = _collateral; 
collateralld = _collateralld; 


oracle = _oracle; 


updateExchangeRate(); 


callerFee = 90000; // 90% 
protocolFee = 10000; // 10% 


collateralizationRate = 75000; // 75% 


EXCHANGE_RATE_PRECISION = _exchangeRatePrecision > 0 
? _exchangeRatePrecision 


: 1e18; 


_isEthMarket = collateralld == penrose.wethAssetld(); 
if (!_isEthMarket) { 
debtRateAgainstEthMarket = _debtRateAgainstEth; 
maxDebtRate = debtRateMax; 
minDebtRate = debtRateMin; 


debtStartPoint = _debtStartPoint; 


minLiquidatorReward = 1e3; 
maxLiquidatorReward = 1e4; 
liquidationBonusAmount = 1e4; 
borrowOpeningFee = 50; // 0.05% 


liquidationMultiplier = 12000; //12% 


// *** VIEW FUNCTIONS *** // 


/// @notice returns total market debt 


function getTotalDebt() external view returns (uint256) { 


return totalBorrow.elastic; 


/// @notice returns the current debt rate 


function getDebtRate() public view returns (uint256) { 


if (_isEthMarket) return penrose.bigBangEthDebtRate(); // default 0.5% 


if (totalBorrow.elastic == 0) return minDebtRate; 


uint256 ethMarketTotalDebt = BigBang(penrose.bigBangEthMarket()) 
.getTotalDebt(); 
uint256 _currentDebt = totalBorrow.elastic; 


uint256 _maxDebtPoint = (_ethMarketTotalDebt * 


debtRateAgainstEthMarket) / 1e18; 


if (_currentDebt >= _maxDebtPoint) return maxDebtRate; 


uint256 debtPercentage = ((_currentDebt - debtStartPoint) * 
DEBT PRECISION) / (_maxDebtPoint - debtStartPoint); 

uint256 debt = ((maxDebtRate - minDebtRate) * debtPercentage) / 
DEBT PRECISION + 


minDebtRate; 


if (debt > maxDebtRate) return maxDebtRate; 


return debt; 


// *** PUBLIC FUNCTIONS *** // 
/// @notice Allows batched call to BingBang. 
/// @param calls An array encoded call data. 
/// @param revertOnFail If True then reverts after a failed call and stops doing further 
Calls. 
function execute( 
bytes[] calldata calls, 
bool revertOnFail 


) external returns (bool[] memory successes, string[] memory results) { 


successes = new bool[](calls.length); 
results = new string[](calls.length); 
for (uint256 i = 0; i < calls.length; i++) { 
(bool success, bytes memory result) = address(this).delegatecall( 
calls[i] 
); 
require(success || !revertOnFail, getRevertMsg(result)); 
successes[i] = success; 


results[i] = _getRevertMsg(result); 


/// @notice allows ‘operator’ to act on behalf of the sender 
/// @param status true/false 
function updateOperator(address operator, bool status) external { 


operators[msg.sender][operator] = status; 


/// @notice Accrues the interest on the borrowed tokens and handles the accumulation of 
fees. 
function accrue() public { 


_accrue(); 


/// @notice Sender borrows ‘amount and transfers it to ‘to’. 


/// @param from Account to borrow for. 


/// @param to The receiver of borrowed tokens. 
/// @param amount Amount to borrow. 
/// @return part Total part of the debt held by borrowers. 
/// @return share Total amount in shares borrowed. 
function borrow( 
address from, 
address to, 
uint256 amount 
) public notPaused solvent(from) returns (uint256 part, uint256 share) { 
uint256 allowanceShare = _computeAllowanceAmountInAsset( 
from, 
exchangeRate, 
amount, 
asset.safeDecimals() 
); 
_allowedBorrow(from, allowanceShare); 


(part, share) = _borrow(from, to, amount); 


/// @notice Repays a loan. 

/// @dev The bool param is not used but we added it to respect the ISingularity interface 
for MarketsHelper compatibility 

/// @param from Address to repay from. 

/// @param to Address of the user this payment should go. 

[I| @param part The amount to repay. See “userBorrowPart’. 


/// @return amount The total amount repayed. 


function repay( 
address from, 
address to, 
bool, 
uint256 part 
) public notPaused allowedBorrow(from, part) returns (uint256 amount) { 


updateExchangeRate(); 


accrue(); 


amount = _repay(from, to, part); 


/// @notice Adds ‘collateral’ from msg.sender to the account ‘to’. 
/// @param from Account to transfer shares from. 
///| @param to The receiver of the tokens. 
/// @param skim True if the amount should be skimmed from the deposit balance of 
msg.sender. 

/// False if tokens from msg.sender in `yieldBox` should be transferred. 
/// @param share The amount of shares to add for ‘to’. 
function addCollateral( 

address from, 

address to, 

bool skim, 

uint256 amount, 


uint256 share 


) public allowedBorrow(from, share) notPaused { 


_addCollateral(from, to, skim, amount, share); 


/// @notice Removes ‘share’ amount of collateral and transfers it to ‘to’. 
/// @param from Account to debit collateral from. 
/// @param to The receiver of the shares. 
/// @param share Amount of shares to remove. 
function removeCollateral( 
address from, 
address to, 
uint256 share 
) public notPaused solvent(from) allowedBorrow(from, share) { 


_removeCollateral(from, to, share); 


/// @notice Entry point for liquidations. 
/// @param users An array of user addresses. 
[I| @param maxBorrowParts A one-to-one mapping to ‘users’, contains maximum 
(partial) borrow amounts (to liquidate) of the respective user. 
[I| @param swapper Contract address of the `MultiSwapper implementation. See 
“setSwapper . 
/// @param collateralToAssetSwapData Extra swap data 
function liquidate( 
address[] calldata users, 


uint256[] calldata maxBorrowParts, 


ISwapper swapper, 
bytes calldata collateralToAssetSwapData 
) external notPaused { 
// Oracle can fail but we still need to allow liquidations 
(, uint256 _exchangeRate) = updateExchangeRate(); 


_accrue(); 


_closedLiquidation( 
users, 
maxBorrowParts, 
Swapper, 
_exchangeRate, 


collateralToAssetSwapData 


/// @notice Lever up: Borrow more and buy collateral with it. 

/// @param from The user who buys 

[I| @param borrowAmount Amount of extra asset borrowed 

/// @param supplyAmount Amount of asset supplied (down payment) 
/// @param minAmountOut Mininal collateral amount to receive 

/// @param swapper Swapper to execute the purchase 

/// @param dexData Additional data to pass to the swapper 

/// @return amountOut Actual collateral amount purchased 

function buyCollateral( 


address from, 


uint256 borrowAmount, 
uint256 supplyAmount, 
uint256 minAmountOut, 
ISwapper swapper, 
bytes calldata dexData 
) external notPaused solvent(from) returns (uint256 amountOut) { 


require(penrose.swappers(swapper), "SGL: Invalid swapper"); 


// Let this fail first to save gas: 
uint256 supplyShare = yieldBox.toShare(assetid, supplyAmount, true); 
if (supplyShare > 0) { 


yieldBox.transfer(from, address(Swapper), assetld, supplyShare); 


uint256 borrowShare; 


(, borrowShare) = _borrow(from, address(swapper), borrowAmount); 


ISwapper.SwapData memory swapData = swapper.buildSwapData( 
assetld, 
collateralld, 
O, 
supplyShare + borrowShare, 
true, 


true 


uint256 collateralShare; 
(amountOut, collateralShare) = swapper.swap( 
swapData, 
minAmountOut, 
from, 
dexData 
); 


require(amountOut >= minAmountOut, "SGL: not enough"); 


_allowedBorrow(from, collateralShare); 


_addCollateral(from, from, false, 0, collateralShare); 


/// @notice Lever down: Sell collateral to repay debt; excess goes to YB 
/// @param from The user who sells 
/// @param share Collateral YieldBox-shares to sell 
/// @param minAmountOut Mininal proceeds required for the sale 
//| @param swapper Swapper to execute the sale 
/// @param dexData Additional data to pass to the swapper 
/// @return amountOut Actual asset amount received in the sale 
function sellCollateral( 

address from, 

uint256 share, 

uint256 minAmountOut, 

ISwapper swapper, 


bytes calldata dexData 


) external notPaused solvent(from) returns (uint256 amountOut) { 


require(penrose.swappers(swapper), "SGL: Invalid swapper"); 


_allowedBorrow(from, share); 

_removeCollateral(from, address(swapper), share); 

ISwapper.SwapData memory swapData = swapper.buildSwapData( 
collateralld, 


assetld, 


); 
uint256 shareOut; 
(amountOut, shareOut) = swapper.swap( 

swapData, 

minAmountOut, 

from, 

dexData 
); 
// As long as the ratio is correct, we trust “amountOut resp. 
// ~shareOut’, because all money received by the swapper gets used up 
// one way or another, or the transaction will revert. 
require(amountOut >= minAmountOut, "SGL: not enough"); 
uint256 partOwed = userBorrowPart[from]; 


uint256 amountOwed = totalBorrow.toElastic(partOwed, true); 


uint256 shareOwed = yieldBox.toShare(assetid, amountOwed, true); 
if (ShareOwed <= shareOut) { 

_repay(from, from, partOwed); 
} else { 

//repay as much as we can 

uint256 partOut = totalBorrow.toBase(amountOut, false); 


_repay(from, from, partOut); 


function transfer( 
address to, 
uint256 amount 


) public override returns (bool) {} 


function transferFrom( 
address from, 
address to, 
uint256 amount 


) public override returns (bool) {} 


// *** OWNER FUNCTIONS ***** // 


/// @notice Transfers fees to penrose 


function refreshPenroseFees( 
address 

) external onlyOwner notPaused returns (uint256 feeShares) { 
uint256 balance = asset.balanceOf(address(this)); 
totalFees += balance; 


feeShares = yieldBox.toShare(assetld, totalFees, false); 


if (totalFees > 0) { 


asset.approve(address(yieldBox), totalFees); 


yieldBox.depositAsset( 
assetld, 
address(this), 
msg.sender, 
totalFees, 


0 


totalFees = 0; 


/// @notice sets BigBang specific configuration 
/// @dev values are updated only if > 0 or not address(0) 
function setBigBangConfig( 


uint256 _minDebtRate, 


uint256 _maxDebtRate, 
uint256 _debtRateAgainstEthMarket, 
uint256 _liquidationMultiplier 

) external onlyOwner { 


_isEthMarket = collateralld == penrose.wethAssetld(); 


if (!_isEthMarket) { 
if (_minDebtRate > 0) { 
require(_minDebtRate < maxDebtRate, "BigBang: not valid"); 
emit MinDebtRateUpdated(minDebtRate, minDebtRate); 


minDebtRate = _minDebtRate; 


if (_maxDebtRate > 0) { 
require(_maxDebtRate > minDebtRate, "BigBang: not valid"); 
emit MaxDebtRateUpdated(maxDebtRate, maxDebtRate); 


maxDebtRate = _maxDebtRate; 


if ( debtRateAgainstEthMarket > 0) { 
emit DebtRateAgainstEthUpdated( 
debtRateAgainstEthMarket, 
_debtRateAgainstEthMarket 
); 


debtRateAgainstEthMarket = _debtRateAgainstEthMarket; 


if (_liquidationMultiplier > 0) { 

require( 
_liquidationMultiplier < FEE PRECISION, 
"BigBang: not valid" 

); 

emit LiquidationMultiplierUpdated( 
liquidationMultiplier, 
_liquidationMultiplier 

); 


liquidationMultiplier = liquidationMultiplier; 


// *** PRIVATE FUNCTIONS *** // 
function _accrue() internal override { 
IBigBang.Accruelnfo memory _accruelnfo = accruelnfo; 
// Number of seconds since accrue was called 
uint256 elapsedTime = block.timestamp - _accruelnfo.lastAccrued; 
if (elapsedTime == 0) { 
return; 
} 


//update debt rate 


uint256 annumDebtRate = getDebtRate(); 


_accruelnfo.debtRate = uint64(annumDebtRate / 31536000); //per second 


_accruelnfo.lastAccrued = uint64(block.timestamp); 


Rebase memory _totalBorrow = totalBorrow; 


uint256 extraAmount = 0; 


// Calculate fees 
extraAmount = 
(uint256(_totalBorrow.elastic) * 
_accruelnfo.debtRate * 
elapsedTime) / 
1e18; 


_totalBorrow.elastic += uint128(extraAmount); 


totalBorrow = _totalBorrow; 


accruelnfo = _accruelnfo; 


emit LogAccrue(extraAmount, _accruelnfo.debtRate); 


function _addCollateral( 


address from, 


address to, 


bool skim, 
uint256 amount, 
uint256 share 
) internal { 
if (share == 0) { 
share = yieldBox.toShare(collateralld, amount, false); 
} 
userCollateralShare[to] += share; 
uint256 oldTotalCollateralShare = totalCollateralShare; 
totalCollateralShare = oldTotalCollateralShare + share; 
_addTokens(from, collateralld, share, oldTotalCollateralShare, skim); 


emit LogAddCollateral(skim ? address(yieldBox) : from, to, share); 


function _liquidateUser( 
address user, 
uint256 maxBorrowPart, 
ISwapper swapper, 
uint256 _exchangeRate, 
bytes calldata_dexData 
) private { 


if (_isSolvent(user, exchangeRate)) return; 


uint256 startTVLInAsset, 


uint256 maxTVLIinAsset 


) = _computeMaxAndMinLTVInAsset( 
userCollateralShare[user], 
_exchangeRate 

); 

uint256 callerReward = _getCallerReward( 
userBorrowPart[user], 
startTVLInAsset, 


maxTVLInAsset 


uint256 borrowAmount, 

uint256 borrowPart, 

uint256 collateralShare 
) = _updateBorrowAndCollateralShare(user, maxBorrowPart, exchangeRate); 
emit LogRemoveCollateral(user, address(Swapper), collateralShare); 


emit LogRepay(address(swapper), user, borrowAmount, borrowPart); 


uint256 borrowShare = yieldBox.toShare(assetid, borrowAmount, true); 


// Closed liquidation using a pre-approved swapper 


require(penrose.swappers(swapper), "BigBang: Invalid swapper"); 


// Swaps the users collateral for the borrowed asset 
yieldBox.transfer( 


address(this), 


address(Swapper), 
collateralld, 


collateralShare 


uint256 minAssetMount = 0; 
if (_dexData.length > 0) { 


minAssetMount = abi.decode(_dexData, (uint256)); 


uint256 balanceBefore = yieldBox.balanceOf(address(this), assetld); 


ISwapper.SwapData memory swapData = swapper.buildSwapData( 
collateralld, 
assetld, 
O, 
collateralShare, 
true, 
true 
); 
swapper.swap(swapData, minAssetMount, address(this), ""); 


uint256 balanceAfter = yieldBox.balanceOf(address(this), assetld); 


uint256 returnedShare = balanceAfter - balanceBefore; 
(uint256 feeShare, uint256 callerShare) = _extractLiquidationFees( 


returnedShare, 


borrowShare, 
callerReward 

); 

address[] memory _users = new address[](1); 

_users[0] = user; 

emit Liquidated( 
msg.sender, 
_users, 
callerShare, 
feeShare, 
borrowAmount, 


collateralShare 


function _extractLiquidationFees( 
uint256 returnedShare, 
uint256 borrowShare, 
uint256 callerReward 
) private returns (uint256 feeShare, uint256 callerShare) { 
uint256 extraShare = returnedShare - borrowShare; 
feeShare = (extraShare * protocolFee) / FEE_PRECISION; // x% of profit goes to fee. 
callerShare = (extraShare * callerReward) / FEE_PRECISION; // y% of profit goes to 


caller. 


yieldBox.transfer(address(this), penrose.feeTo(), assetid, feeShare); 


yieldBox.transfer(address(this), msg.sender, assetld, callerShare); 


/// @notice Handles the liquidation of users' balances, once the users' amount of collateral 
is too low. 
/// @dev Closed liquidations Only, 90% of extra shares goes to caller and 10% to protocol 
/// @param users An array of user addresses. 
[I| @param maxBorrowParts A one-to-one mapping to ‘users’, contains maximum 
(partial) borrow amounts (to liquidate) of the respective user. 
[I| @param swapper Contract address of the `MultiSwapper implementation. See 
“setSwapper . 
//| @param swapData Swap necessar data 
function _closedLiquidation( 
address[] calldata users, 
uint256[] calldata maxBorrowParts, 
ISwapper swapper, 
uint256 _exchangeRate, 
bytes calldata swapData 
) private { 
uint256 liquidatedCount = 0; 
for (uint256 i = 0; i < users.length; i++) { 
address user = users[i]; 
if (!_isSolvent(user, exchangeRate)) { 
liquidatedCount++; 
_liquidateUser( 


user, 


maxBorrowPartsl[i], 
swapper, 
_exchangeRate, 


swapData 


require(liquidatedCount > 0, "SGL: no users found"); 


/// @dev Helper function to move tokens. 
/// @param from Account to debit tokens from, in `yieldBox`. 
/// @param _tokenld The ERC-20 token asset ID in yieldBox. 
/// @param share The amount in shares to add. 
/// @param total Grand total amount to deduct from this contract's balance. Only 
applicable if `skim` is True. 
/// Only used for accounting checks. 
/// @param skim If True, only does a balance check on this contract. 
/// False if tokens from msg.sender in `yieldBox` should be transferred. 
function addTokens( 
address from, 
uint256 _tokenld, 
uint256 share, 
uint256 total, 


bool skim 


) internal { 
if (skim) { 
require( 
share <= yieldBox.balanceOf(address(this), tokenld) - total, 
"BigBang: too much" 
); 
} else { 


yieldBox.transfer(from, address(this), tokenld, share); 


/// @dev Concrete implementation of ~removeCollateral’. 
function removeCollateral( 
address from, 
address to, 
uint256 share 
) internal { 
userCollateralShare[from] -= share; 
totalCollateralShare -= share; 
emit LogRemoveCollateral(from, to, share); 


yieldBox.transfer(address(this), to, collateralld, share); 


/// @dev Concrete implementation of ‘repay’. 
function repay( 


address from, 


address to, 
uint256 part 
) internal returns (uint256 amount) { 


(totalBorrow, amount) = totalBorrow.sub(part, true); 


userBorrowPart[to] -= part; 


uint256 toWithdraw = (amount - part); //acrrued 

uint256 toBurn = amount - toWithdraw; 
yieldBox.withdraw(assetld, from, address(this), amount, 0); 
//burn USDO 

if (toBurn > 0) { 


IUSDOBase(address(asset)).burn(address(this), toBurn); 


emit LogRepay(from, to, amount, part); 


/// @dev Concrete implementation of `borrow`. 
function _borrow( 
address from, 
address to, 
uint256 amount 
) internal returns (uint256 part, uint256 share) { 
uint256 feeAmount = (amount * borrowOpeningFee) / FEE_PRECISION; // A flat % fee is 


charged for any borrow 


(totalBorrow, part) = totalBorrow.add(amount + feeAmount, true); 
require( 
totalBorrowCap == 0 || totalBorrow.elastic <= totalBorrowCap, 


"BigBang: borrow cap reached" 


userBorrowPart[from] += part; 


//mint USDO 


IUSDOBase(address(asset)).mint(address(this), amount); 


//deposit borrowed amount to user 
asset.approve(address(yieldBox), amount); 


yieldBox.depositAsset(assetld, address(this), to, amount, 0); 


share = yieldBox.toShare(assetid, amount, false); 


emit LogBorrow(from, to, amount, feeAmount, part); 


function updateBorrowAndCollateralShare( 


address user, 


uint256 maxBorrowPart, 


uint256 _exchangeRate 


private 

returns ( 
uint256 borrowAmount, 
uint256 borrowPart, 


uint256 collateralShare 


uint256 collateralPartinAsset = (yieldBox.toAmount( 
collateralld, 
userCollateralShare[user], 
false 


) * EXCHANGE_RATE_PRECISION) / exchangeRate; 


uint256 borrowAssetDecimals = asset.safeDecimals(); 


uint256 collateralDecimals = collateral.safeDecimals(); 


uint256 availableBorrowPart = computeClosingFactor( 
userBorrowPart[user], 
collateralPartInAsset, 
borrowAssetDecimals, 
collateralDecimals, 
FEE PRECISION DECIMALS 
); 
borrowPart = maxBorrowPart > availableBorrowPart 
? availableBorrowPart 


: maxBorrowPart; 


if (borrowPart > userBorrowPart[user]) { 


borrowPart = userBorrowPart[ user]; 


userBorrowPart[ user] = userBorrowPart[ user] - borrowPart; 


borrowAmount = totalBorrow.toElastic(borrowPart, false); 

uint256 amountWithBonus = borrowAmount + 
(borrowAmount * liquidationMultiplier) / 
FEE PRECISION; 

collateralShare = yieldBox.toShare( 
collateralld, 
(amountWithBonus * _exchangeRate) / EXCHANGE_RATE_PRECISION, 
false 

); 

if (collateralShare > userCollateralShare[user]) { 
collateralShare = userCollateralShare[user]; 

} 

userCollateralShare[user] -= collateralShare; 


require(borrowAmount != 0, "SGL: solvent"); 


totalBorrow.elastic -= uintl28(borrowAmount); 


totalBorrow.base -= uint128(borrowPart); 


----- E:/Train/makePDF/v1\tapioca-bar-audit-master\contracts\markets\singularity/SGLBorrow. 
sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


import "./SGLLendingCommon.sol"; 


/// @title Singularity borrow module 
/// @notice Singularity module for borrow type actions 
contract SGLBorrow is SGLLendingCommon { 

using RebaseLibrary for Rebase; 


using BoringERC20 for IERC20; 


// *°* PUBLIC FUNCTIONS *** // 
/// @notice Sender borrows ‘amount’ and transfers it to ‘to’. 
/// @param from Account to borrow for. 
/// @param to The receiver of borrowed tokens. 
/// @param amount Amount to borrow. 
/// @return part Total part of the debt held by borrowers. 
/// @return share Total amount in shares borrowed. 
function borrow( 
address from, 
address to, 


uint256 amount 


) public notPaused solvent(from) returns (uint256 part, uint256 share) { 
if (amount == 0) return (0, 0); 
uint256 allowanceShare = computeAllowanceAmountInAsset( 
from, 
exchangeRate, 
amount, 
asset.safeDecimals() 
); 


_allowedBorrow(from, allowanceShare); 


(part, share) = _borrow(from, to, amount); 


/// @notice Repays a loan. 
//| @param from Address to repay from. 
/// @param to Address of the user this payment should go. 
/// @param skim True if the amount should be skimmed from the deposit balance of 
msg.sender. 

/// False if tokens from msg.sender in `yieldBox` should be transferred. 
/// @param part The amount to repay. See “userBorrowPart’. 
/// @return amount The total amount repayed. 
function repay( 

address from, 

address to, 

bool skim, 


uint256 part 


) public notPaused allowedBorrow(from, part) returns (uint256 amount) { 


updateExchangeRate(); 


_accrue(); 


amount = _repay(from, to, skim, part); 


----- E:/Train/makePDF/v1\tapioca-bar-audit-master\contracts\markets\singularity/SGLCollater 
al.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


import "./SGLLendingCommon.sol"; 


/// @title Singularity collateral module 
/// @notice Singularity module for collateral type actions 
contract SGLCollateral is SGLLendingCommon { 

using RebaseLibrary for Rebase; 


using BoringERC20 for IERC20; 


// *** PUBLIC FUNCTIONS *** // 
/// @notice Adds ‘collateral’ from msg.sender to the account `to`. 
/// @param from Account to transfer shares from. 
/// @param to The receiver of the tokens. 
/// @param skim True if the amount should be skimmed from the deposit balance of 
msg.sender. 
/// False if tokens from msg.sender in `yieldBox` should be transferred. 
[I| @param share The amount of shares to add for ‘to’. 
function addCollateral( 
address from, 


address to, 


bool skim, 
uint256 amount, 
uint256 share 
) public notPaused allowedBorrow(from, share) { 


_addCollateral(from, to, skim, amount, share); 


/// @notice Removes ‘share’ amount of collateral and transfers it to ‘to’. 
/// @param from Account to debit collateral from. 
/// @param to The receiver of the shares. 
/// @param share Amount of shares to remove. 
function removeCollateral( 
address from, 
address to, 
uint256 share 
) public notPaused solvent(from) allowedBorrow(from, share) { 


_removeCollateral(from, to, share); 


----- E:/Train/makePDF/v1\tapioca-bar-audit-master\contracts\markets\singularity/SGLCommo 
n.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


import "./SGLStorage.sol"; 


/// @title Singularity Common 

/// @notice Singularity market common module 

/// @dev this module is implemented by all the others 
contract SGLCommon is SGLStorage { 


using RebaseLibrary for Rebase; 


// *** PUBLIC FUNCTIONS *** // 


/// @notice Accrues the interest on the borrowed tokens and handles the accumulation of 
fees. 
function accrue() public { 


_accrue(); 


function getinterestDetails() 
external 


view 


returns ( 
ISingularity.AccrueInfo memory _accruelnfo, 


uint256 utilization 


(_accruelnfo, ,,, , utilization, ) = _getInterestRate(); 


// *** PRIVATE FUNCTIONS *** // 
function getinterestRate() 
internal 
view 
returns ( 
ISingularity.AccrueInfo memory _accruelnfo, 
Rebase memory _totalBorrow, 
Rebase memory _totalAsset, 
uint256 extraAmount, 
uint256 feeFraction, 
uint256 utilization, 


bool logStartingInterest 


_accruelnfo = accruelnfo; 


_totalBorrow = totalBorrow; 


_totalAsset = totalAsset; 
extraAmount = 0; 
feeFraction = 0; 


logStartinglnterest = false; 


uint256 fullAssetAmount = yieldBox.toAmount( 
assetld, 
_totalAsset.elastic, 
false 


) + _totalBorrow.elastic; 


utilization = fullAssetAmount == 
20 
: (uint256(_totalBorrow.elastic) * UTILIZATION PRECISION) / 


fullAssetAmount; 


// Number of seconds since accrue was called 
uint256 elapsedTime = block.timestamp - _accruelnfo.lastAccrued; 
if (elapsedTime == 0) { 
return ( 

_accruelnfo, 

totalBorrow, 

totalAsset, 

O, 

O, 


utilization, 


logStartingInterest 


} 


_accruelnfo.lastAccrued = uint64(block.timestamp); 


if (_ totalBorrow.base == 0) { 

// \f there are no borrows, reset the interest rate 

if (_accruelnfo.interestPerSecond != startinglnterestPerSecond) { 
_accruelnfo.interestPerSecond = startingInterestPerSecond; 
logStartingInterest = true; 

} 

return ( 
_accruelnfo, 
_totalBorrow, 
totalAsset, 
O, 
O, 
utilization, 


logStartinglnterest 


// Accrue interest 
extraAmount = 
(uint256(_totalBorrow.elastic) * 


_accruelnfo.interestPerSecond * 


elapsedTime) / 
1e18; 


_totalBorrow.elastic += uint128(extraAmount); 


uint256 feeAmount = (extraAmount * protocolFee) / FEE_PRECISION; // % of interest 
paid goes to fee 
feeFraction = (feeAmount * totalAsset.base) / fullAssetAmount; 
_accruelnfo.feesEarnedFraction += uint128(feeFraction); 


_totalAsset.base = totalAsset.base + uintl128(feeFraction); 


// Update interest rate 
if (utilization < minimumTargetUtilization) { 
uint256 underFactor = ((minimumTargetUtilization - utilization) * 
FACTOR_PRECISION) / minimumTargetUtilization; 
uint256 scale = interestElasticity + 
(underFactor * underFactor * elapsedTime); 
_accruelnfo.interestPerSecond = uint64( 
(uint256(_accruelnfo.interestPerSecond) * interestElasticity) / 
scale 
); 
if (_accruelnfo.interestPerSecond < minimumInterestPerSecond) { 
_accruelnfo.interestPerSecond = minimuminterestPerSecond; // 0.25% APR 
minimum 
} 
} else if (utilization > maximumTargetUtilization) { 


uint256 overFactor = ((utilization - maximumTargetUtilization) * 


FACTOR_PRECISION) / fullUtilizationMinusMax; 
uint256 scale = interestElasticity + 
(overFactor * overFactor * elapsedTime); 
uint256 newlnterestPerSecond = (uint256( 
_accruelnfo.interestPerSecond 
) * scale) / interestElasticity; 
if (newlnterestPerSecond > maximumInterestPerSecond) { 
newlInterestPerSecond = maximumInterestPerSecond; // 1000% APR maximum 


} 


_accruelnfo.interestPerSecond = uint64(newlnterestPerSecond); 


function _accrue() internal override { 
( 
ISingularity.AccrueInfo memory _accruelnfo, 
Rebase memory _totalBorrow, 
Rebase memory _totalAsset, 
uint256 extraAmount, 
uint256 feeFraction, 
uint256 utilization, 
bool logStartingInterest 


) = _getInterestRate(); 


if (logStartingInterest) { 


emit LogAccrue(0, 0, startingInterestPerSecond, 0); 


} else { 
emit LogAccrue( 
extraAmount, 
feeFraction, 
_accruelnfo.interestPerSecond, 


utilization 


} 


accruelnfo = _accruelnfo; 
totalBorrow = _totalBorrow; 


totalAsset = _totalAsset; 


/// @dev Helper function to move tokens. 
/// @param from Account to debit tokens from, in `yieldBox`. 
/// @param to The user that receives the tokens. 
/// @param _assetld The ERC-20 token asset ID in yieldBox. 
/// @param share The amount in shares to add. 
/// @param total Grand total amount to deduct from this contract's balance. Only 
applicable if “skim” is True. 
/// Only used for accounting checks. 
/// @param skim If True, only does a balance check on this contract. 
/// False if tokens from msg.sender in `yieldBox` should be transferred. 
function addTokens( 
address from, 


address to, 


uint256 _assetld, 
uint256 share, 
uint256 total, 
bool skim 

) internal { 


bytes32 asset_sig = _assetld == assetld ? ASSET SIG : COLLATERAL SIG; 


_yieldBoxShares|[to][_asset_sig] += share; 


if (skim) { 
require( 
share <= yieldBox.balanceOf(address(this), _assetld) - total, 
"SGL: too much" 
); 
} else { 


yieldBox.transfer(from, address(this), assetid, share); 


/// @dev Concrete implementation of `addAsset`. 
function _addAsset( 

address from, 

address to, 

bool skim, 

uint256 share 


) internal returns (uint256 fraction) { 


Rebase memory totalAsset = totalAsset; 
uint256 totalAssetShare = _totalAsset.elastic; 
uint256 allShare = _totalAsset.elastic + 
yieldBox.toShare(assetld, totalBorrow.elastic, true); 
fraction = allShare == 
? share 
: (Share * totalAsset.base) / allShare; 
if (_totalAsset.base + uint128(fraction) < 1000) { 
return 0; 
} 
totalAsset = _totalAsset.add(share, fraction); 
balanceOf[to] += fraction; 


emit Transfer(address(0), to, fraction); 


_addTokens(from, to, assetid, share, totalAssetShare, skim); 


emit LogAddAsset(skim ? address(yieldBox) : from, to, share, fraction); 


/// @dev Concrete implementation of ~removeAsset’. 
/// @param from The account to remove from. Should always be msg.sender except for 
“depositFeesToyieldBox()°. 
function removeAsset( 
address from, 
address to, 
uint256 fraction, 


bool updateYieldBoxShares 


) internal returns (uint256 share) { 
if (totalAsset.base == 0) { 
return 0; 
} 
Rebase memory _totalAsset = totalAsset; 
uint256 allShare = _totalAsset.elastic + 
yieldBox.toShare(assetld, totalBorrow.elastic, true); 
share = (fraction * allShare) / _totalAsset.base; 
balanceOf[from] -= fraction; 
emit Transfer(from, address(0), fraction); 
_totalAsset.elastic -= uint128(share); 
_totalAsset.base -= uintl128(fraction); 
require(_totalAsset.base >= 1000, "SGL: min limit"); 
totalAsset = _totalAsset; 
emit LogRemoveAsset(from, to, share, fraction); 
yieldBox.transfer(address(this), to, assetld, share); 
if (updateYieldBoxShares) { 
if (Share > _yieldBoxShares[from][ASSET_ SIG]) { 
_yieldBoxShares[from][ASSET_SIG] = 0; //some assets accrue in time 
} else { 


_yieldBoxShares[from][ASSET_SIG] -= share; 


/// @dev Return the equivalent of collateral borrow part in asset amount. 


function getAmountForBorrowPart( 
uint256 borrowPart 
) internal view returns (uint256) { 


return totalBorrow.toElastic(borrowPart, false); 


----- E:/Train/makePDF/v1\tapioca-bar-audit-master\contracts\markets\singularity/SGLLending 
Common.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


import "./SGLCommon.sol"; 


/// @title Singularity lending module 
/// @notice Singularity common module specific to borrow & collateral modules 
contract SGLLendingCommon is SGLCommon { 

using RebaseLibrary for Rebase; 


using BoringERC20 for IERC20; 


// *** PRIVATE FUNCTIONS *** // 
/// @dev Concrete implementation of ~addCollateral’. 
function _addCollateral( 
address from, 
address to, 
bool skim, 
uint256 amount, 
uint256 share 
) internal { 
if (share == 0) { 


share = yieldBox.toShare(collateralld, amount, false); 


} 
userCollateralShare[to] += share; 
uint256 oldTotalCollateralShare = totalCollateralShare; 
totalCollateralShare = oldTotalCollateralShare + share; 
_addTokens( 

from, 

to, 

collateralld, 

Share, 

oldTotalCollateralShare, 

skim 
); 


emit LogAddCollateral(skim ? address(yieldBox) : from, to, share); 


/// @dev Concrete implementation of ~removeCollateral’. 
function removeCollateral( 
address from, 
address to, 
uint256 share 
) internal { 
userCollateralShare[from] -= share; 
totalCollateralShare -= share; 
emit LogRemoveCollateral(from, to, share); 
yieldBox.transfer(address(this), to, collateralld, share); 


if (Share > _yieldBoxShares[from][COLLATERAL_SIG]) { 


_yieldBoxShares[from][COLLATERAL SIG] = 0; //accrues in time 
} else { 


_yieldBoxShares[from][COLLATERAL_ SIG] -= share; 


/// @dev Concrete implementation of “borrow”. 
function _borrow( 
address from, 
address to, 
uint256 amount 
) internal returns (uint256 part, uint256 share) { 
uint256 feeAmount = (amount * borrowOpeningFee) / FEE_PRECISION; // A flat % fee is 


charged for any borrow 


(totalBorrow, part) = totalBorrow.add(amount + feeAmount, true); 
require( 
totalBorrowCap == 0 || totalBorrow.base <= totalBorrowCap, 
"SGL: borrow cap reached" 
); 
userBorrowPart[from] += part; 


emit LogBorrow(from, to, amount, feeAmount, part); 


share = yieldBox.toShare(assetld, amount, false); 
Rebase memory _totalAsset = totalAsset; 


require(_totalAsset.base >= 1000, "SGL: min limit"); 


_totalAsset.elastic -= uint128(share); 


totalAsset = _totalAsset; 


yieldBox.transfer(address(this), to, assetld, share); 


/// @dev Concrete implementation of “repay”. 
function repay( 

address from, 

address to, 

bool skim, 

uint256 part 
) internal returns (uint256 amount) { 


(totalBorrow, amount) = totalBorrow.sub(part, true); 


userBorrowPart[to] -= part; 


uint256 share = yieldBox.toShare(assetld, amount, true); 
uint128 totalShare = totalAsset.elastic; 

_addTokens(from, to, assetid, share, uint256(totalShare), skim); 
totalAsset.elastic = totalShare + uint128(share); 


emit LogRepay(skim ? address(yieldBox) : from, to, amount, part); 


----- E:/Train/makePDF/v1\tapioca-bar-audit-master\contracts\markets\singularity/SGLLeverag 
e.sol---- 
// SPDX-License-lIdentifier: UNLICENSED 


pragma solidity *0.8.18; 


import "./SGLLendingCommon.sol"; 
import {IUSDOBase} from "tapioca-periph/contracts/interfaces/IUSDO.sol"; 


import {ITapiocaOFT} from "tapioca-periph/contracts/interfaces/ITapiocaOFT.sol"; 


/// @title Singularity leverage module 
/// @notice Singularity module for leverage type actions 
contract SGLLeverage is SGLLendingCommon { 

using RebaseLibrary for Rebase; 


using BoringERC20 for IERC20; 


/// @notice Level up cross-chain: Borrow more and buy collateral with it. 
[I| @param from The user who sells 
/// @param collateralAmount Extra collateral to be added 
/// @param borrowAmount Borrowed amount that will be swapped into collateral 
//| @param swapData Swap data used on destination chain for swapping USDO to the 
underlying TOFT token 
/// @param |zData LayerZero specific data 
/// @param externalData External contracts used for the cross chain operation 
function multiHopBuyCollateral( 
address from, 


uint256 collateralAmount, 


uint256 borrowAmount, 
IUSDOBase.ILeverageSwapData calldata swapData, 
IUSDOBase.ILeverageLZData calldata IzData, 
IUSDOBase.|LeverageExternalContractsData calldata externalData 
) external payable notPaused solvent(from) { 
require( 
penrose.swappers(ISwapper(externalData.swapper)), 


"SGL: Invalid swapper" 


//add collateral 

uint256 collateralShare = yieldBox.toShare( 
collateralld, 
collateralAmount, 
false 

); 

_allowedBorrow(from, collateralShare); 


_addCollateral(from, from, false, 0, collateralShare); 


//borrow 


(, uint256 borrowShare) = _borrow(from, from, borrowAmount); 


//withdraw 


yieldBox.withdraw(assetld, from, address(this), 0, borrowShare); 


IUSDOBase(address(asset)).sendForLeverage{value: msg.value } ( 


borrowAmount, 
from, 

IzData, 
swapData, 


externalData 


function multiHopSellCollateral( 

address from, 

uint256 share, 

IUSDOBase.ILeverageSwapData calldata swapData, 

IUSDOBase.|LeverageLZData calldata IzData, 

IUSDOBase.ILeverageExternalContractsData calldata externalData 
) external payable notPaused solvent(from) { 

require( 

penrose.swappers(ISwapper(externalData.swapper)), 


"SGL: Invalid swapper" 


_allowedBorrow(from, share); 
_removeCollateral(from, address(this), share); 
(uint256 amountOut, ) = yieldBox.withdraw( 
collateralld, 
address(this), 


address(this), 


//send for unwrap 
ITapiocaOFT(address(collateral)).sendForLeverage{value: msg.value}( 
amountOut, 
from, 
IzData, 
swapData, 


externalData 


/// @notice Lever down: Sell collateral to repay debt; excess goes to YB 
/// @param from The user who sells 
/// @param share Collateral YieldBox-shares to sell 
/// @param minAmountOut Mininal proceeds required for the sale 
/// @param swapper Swapper to execute the sale 
/// @param dexData Additional data to pass to the swapper 
/// @return amountOut Actual asset amount received in the sale 
function sellCollateral( 

address from, 

uint256 share, 

uint256 minAmountOut, 


ISwapper swapper, 


bytes calldata dexData 
) external notPaused solvent(from) returns (uint256 amountOut) { 


require(penrose.swappers(swapper), "SGL: Invalid swapper"); 


_allowedBorrow(from, share); 

_removeCollateral(from, address(swapper), share); 

ISwapper.SwapData memory swapData = swapper.buildSwapData( 
collateralld, 


assetld, 


); 
uint256 shareOut; 
(amountOut, shareOut) = swapper.swap( 

swapData, 

minAmountOut, 

from, 

dexData 
); 
// As long as the ratio is correct, we trust `amountOut` resp. 
// “shareOut’, because all money received by the swapper gets used up 
// one way or another, or the transaction will revert. 
require(amountOut >= minAmountOut, "SGL: not enough"); 


uint256 partOwed = userBorrowPart[from]; 


uint256 amountOwed = totalBorrow.toElastic(partOwed, true); 
uint256 shareOwed = yieldBox.toShare(assetid, amountOwed, true); 
if (ShareOwed <= shareOut) { 

_repay(from, from, false, partOwed); 
} else { 

//repay as much as we can 

uint256 partOut = totalBorrow.toBase(amountOut, false); 


_repay(from, from, false, partOut); 


/// @notice Lever up: Borrow more and buy collateral with it. 
/// @param from The user who buys 
/// @param borrowAmount Amount of extra asset borrowed 
/// @param supplyAmount Amount of asset supplied (down payment) 
/// @param minAmountOut Mininal collateral amount to receive 
[I| @param swapper Swapper to execute the purchase 
/// @param dexData Additional data to pass to the swapper 
/// @return amountOut Actual collateral amount purchased 
function buyCollateral( 

address from, 

uint256 borrowAmount, 

uint256 supplyAmount, 

uint256 minAmountOut, 

ISwapper swapper, 


bytes calldata dexData 


) external notPaused solvent(from) returns (uint256 amountOut) { 


require(penrose.swappers(swapper), "SGL: Invalid swapper"); 


// Let this fail first to save gas: 
uint256 supplyShare = yieldBox.toShare(assetid, supplyAmount, true); 
if (supplyShare > 0) { 


yieldBox.transfer(from, address(Swapper), assetld, supplyShare); 


uint256 borrowShare; 


(, borrowShare) = _borrow(from, address(swapper), borrowAmount); 


ISwapper.SwapData memory swapData = swapper.buildSwapData( 
assetld, 
collateralld, 
O, 
supplyShare + borrowShare, 
true, 


true 


uint256 collateralShare; 

(amountOut, collateralShare) = swapper.swap( 
swapData, 
minAmountOut, 


from, 


dexData 
); 


require(amountOut >= minAmountOut, "SGL: not enough"); 


_allowedBorrow(from, collateralShare); 


_addCollateral(from, from, false, 0, collateralShare); 


----- E:/Train/makePDF/v1\tapioca-bar-audit-master\contracts\markets\singularity/SGLLiquidat 
ion.sol---- 
// SPDX-License-lIdentifier: UNLICENSED 


pragma solidity *0.8.18; 


import "./SGLCommon.sol"; 


// solhint-disable max-line-length 


/// @title Singularity liquidation module 
/// @notice Singularity module for liquidation type actions 
contract SGLLiquidation is SGLCommon { 

using RebaseLibrary for Rebase; 


using BoringERC20 for IERC20; 


// *** PUBLIC FUNCTIONS *** // 


/// @notice Entry point for liquidations. 
/// @dev Will call *closedLiquidation()* if not LQ exists or no LQ bid avail exists. Otherwise 
use LQ. 
/// @param users An array of user addresses. 
[I| @param maxBorrowParts A one-to-one mapping to ‘users’, contains maximum 
(partial) borrow amounts (to liquidate) of the respective user. 


Ill Ignore for `orderBookLiquidation()` 


//| @param swapper Contract address of the ~MultiSwapper’ implementation. See 
“setSwapper . 
Ill Ignore for `orderBookLiquidation()` 
/// @param collateralToAssetSwapData Extra swap data 
Ill Ignore for `orderBookLiquidation()` 
[I| @param usdoToBorrowedSwapData Extra swap data 
III Ignore for `closedLiquidation()` 
function liquidate( 
address[] calldata users, 
uint256[] calldata maxBorrowParts, 
ISwapper swapper, 
bytes calldata collateralToAssetSwapData, 
bytes calldata usdoToBorrowedSwapData 
) external notPaused { 
// Oracle can fail but we still need to allow liquidations 
(, uint256 exchangeRate) = updateExchangeRate(); 


_accrue(); 


if (address(liquidationQueue) != address(0)) { 
(, bool bidAvail, uint256 bidAmount) = liquidationQueue 
.getNextAvailBidPool(); 
if (bidAvail) { 
uint256 needed = 0; 
for (uint256 i = 0; i < maxBorrowParts.length; i++) { 


needed += maxBorrowParts[i]; 


if (bidAmount >= needed) { 
_orderBookLiquidation( 
users, 
_exchangeRate, 
usdoToBorrowedSwapData 
); 


return; 


} 


_closedLiquidation( 
users, 
maxBorrowParts, 
Swapper, 
_exchangeRate, 


collateralToAssetSwapData 


// *** PRIVATE FUNCTIONS *** // 

function computeAssetAmountToSolvency( 
address user, 
uint256 _exchangeRate 


) private view returns (uint256) { 


// accrue must have already been called! 
uint256 borrowPart = userBorrowPart[user]; 
if (borrowPart == 0) return O; 


uint256 collateralShare = userCollateralShare[user]; 


Rebase memory _totalBorrow = totalBorrow; 


uint256 collateralAmountinAsset = yieldBox.toAmount( 
collateralld, 
(collateralShare * 
(EXCHANGE_RATE_PRECISION / FEE_PRECISION) * 
IqCollateralizationRate), 
false 
) / _exchangeRate; 
// Obviously it's not ~borrowPart’ anymore but *borrowAmount™ 


borrowPart = (borrowPart * totalBorrow.elastic) /_totalBorrow.base; 


return 
borrowPart >= collateralAmountInAsset 
? borrowPart - collateralAmountinAsset 


: 0; 


function _orderBookLiquidation( 


address[] calldata users, 


uint256 _exchangeRate, 


bytes memory swapData 

) private { 
uint256 allCollateralShare; 
uint256 allBorrowAmount; 
uint256 allBorrowPart; 


Rebase memory _totalBorrow = totalBorrow; 


for (uint256 i = 0; i < users.length; i++) { 
address user = users[i]; 

if (!_isSolvent(user, exchangeRate)) { 
uint256 borrowAmount = _computeAssetAmountToSolvency( 


user, 


_exchangeRate 


if (borrowAmount == 0) { 


continue; 


uint256 borrowPart; 

{ 
uint256 availableBorrowPart = userBorrowPart[user]; 
borrowPart = _totalBorrow.toBase(borrowAmount, false); 
userBorrowPart[user] = availableBorrowPart - borrowPart; 

} 


uint256 amountWithBonus = borrowAmount + 


(borrowAmount * liquidationMultiplier) / 
FEE PRECISION; 
uint256 collateralShare = yieldBox.toShare( 
collateralld, 
(amountWithBonus * _exchangeRate) / EXCHANGE_RATE_PRECISION, 
false 
); 
userCollateralShare[user] -= collateralShare; 
emit LogRemoveCollateral( 
user, 
address(liquidationQueue), 
collateralShare 
); 
emit LogRepay( 
address(liquidationQueue), 
user, 
borrowAmount, 


borrowPart 


// Keep totals 
allCollateralShare += collateralShare; 
allBorrowAmount += borrowAmount; 


allBorrowPart += borrowPart; 


require(allBorrowAmount != 0, "SGL: solvent"); 


_totalBorrow.elastic -= uint128(allBorrowAmount); 
_totalBorrow.base -= uint128(allBorrowPart); 
totalBorrow = _totalBorrow; 


totalCollateralShare -= allCollateralShare; 


uint256 allBorrowShare = yieldBox.toShare( 
assetid, 
allBorrowAmount, 


true 


// Transfer collateral to be liquidated 
yieldBox.transfer( 
address(this), 
address(liquidationQueue), 
collateralld, 


allCollateralShare 


// LiquidationQueue pay debt 
liquidationQueue.executeBids( 
yieldBox.toAmount(collateralld, allCollateralShare, true), 


swapData 


uint256 returnedShare = yieldBox.balanceOf(address(this), assetld) - 
uint256(totalAsset.elastic); 
uint256 extraShare = returnedShare - allBorrowShare; 


uint256 callerShare = (extraShare * callerFee) / FEE_PRECISION; // 1% goes to caller 


emit Liquidated( 
msg.sender, 
users, 
callerShare, 
returnedShare - callerShare, 
allBorrowAmount, 


allCollateralShare 


yieldBox.transfer(address(this), msg.sender, assetld, callerShare); 


totalAsset.elastic += uintl128(returnedShare - callerShare); 
emit LogAddAsset( 

address(liquidationQueue), 

address(this), 

returnedShare - callerShare, 


0 


function updateBorrowAndCollateralShare( 
address user, 
uint256 maxBorrowPart, 


uint256 _exchangeRate 


private 

returns ( 
uint256 borrowAmount, 
uint256 borrowPart, 


uint256 collateralShare 


uint256 collateralPartinAsset = (yieldBox.toAmount( 
collateralld, 
userCollateralShare[user], 
false 


) * EXCHANGE_RATE_PRECISION) / exchangeRate; 


uint256 borrowAssetDecimals = asset.safeDecimals(); 


uint256 collateralDecimals = collateral.safeDecimals(); 


uint256 availableBorrowPart = computeClosingFactor( 
userBorrowPart[user], 
collateralPartInAsset, 
borrowAssetDecimals, 


collateralDecimals, 


FEE PRECISION DECIMALS 


if (liquidationBonusAmount > 0) { 
availableBorrowPart = 
availableBorrowPart + 


(availableBorrowPart * liquidationBonusAmount) / 


FEE PRECISION; 


borrowPart = maxBorrowPart > availableBorrowPart 
? availableBorrowPart 


: maxBorrowPart; 


if (borrowPart > userBorrowPart[user]) { 


borrowPart = userBorrowPart[ user]; 


userBorrowPart[ user] = userBorrowPart[ user] - borrowPart; 


borrowAmount = totalBorrow.toElastic(borrowPart, false); 


uint256 amountWithBonus = borrowAmount + 


(borrowAmount * liquidationMultiplier) / 


FEE PRECISION; 


collateralShare = yieldBox.toShare( 


collateralld, 
(amountWithBonus * _exchangeRate) / EXCHANGE_RATE_PRECISION, 
false 
); 
if (collateralShare > userCollateralShare[user]) { 
collateralShare = userCollateralShare[user]; 
} 
userCollateralShare[user] -= collateralShare; 


require(borrowAmount != 0, "SGL: solvent"); 


totalBorrow.elastic -= uintl28(borrowAmount); 


totalBorrow.base -= uint128(borrowPart); 


function _extractLiquidationFees( 
uint256 borrowShare, 
uint256 callerReward, 
address swapper 
) private returns (uint256 feeShare, uint256 callerShare) { 
uint256 returnedShare = yieldBox.balanceOf(address(this), assetld) - 
uint256(totalAsset.elastic); 
uint256 extraShare = returnedShare - borrowShare; 
feeShare = (extraShare * protocolFee) / FEE_PRECISION; // x% of profit goes to fee. 
callerShare = (extraShare * callerReward) / FEE_PRECISION; // y% of profit goes to 


caller. 


yieldBox.transfer(address(this), penrose.feeTo(), assetid, feeShare); 


yieldBox.transfer(address(this), msg.sender, assetld, callerShare); 


totalAsset.elastic += uintl28(returnedShare - feeShare - callerShare); 


emit LogAddAsset( 
Swapper, 
address(this), 
extraShare - feeShare - callerShare, 


0 


function _liquidateUser( 
address user, 
uint256 maxBorrowPart, 
ISwapper swapper, 
uint256 _exchangeRate, 
bytes calldata dexData 
) private { 


if (_isSolvent(user, exchangeRate)) return; 


uint256 startTVLInAsset, 
uint256 maxTVLInAsset 


) = _computeMaxAndMinLTVInAsset( 


userCollateralShare[user], 
_exchangeRate 
); 
uint256 callerReward = _getCallerReward( 
userBorrowPart[user], 
startTVLInAsset, 


maxTVLInAsset 


uint256 borrowAmount, 

uint256 borrowPart, 

uint256 collateralShare 
) = _updateBorrowAndCollateralShare(user, maxBorrowPart, exchangeRate); 
emit LogRemoveCollateral(user, address(Swapper), collateralShare); 


emit LogRepay(address(swapper), user, borrowAmount, borrowPart); 


uint256 borrowShare = yieldBox.toShare(assetid, borrowAmount, true); 


// Closed liquidation using a pre-approved swapper 


require(penrose.swappers(swapper), "SGL: Invalid swapper"); 


// Swaps the users collateral for the borrowed asset 
yieldBox.transfer( 
address(this), 


address(swapper), 


collateralld, 


collateralShare 


uint256 minAssetAmount = 0; 
if (dexData.length > 0) { 


minAssetAmount = abi.decode(dexData, (uint256)); 


ISwapper.SwapData memory swapData = swapper.buildSwapData( 
collateralld, 
assetld, 
O, 
collateralShare, 
true, 
true 
); 


swapper.swap(swapData, minAssetAmount, address(this), ""); 


(uint256 feeShare, uint256 callerShare) = _extractLiquidationFees( 
borrowShare, 
callerReward, 


address(swapper) 


address[] memory _users = new address[](1); 


_users[0] = user; 
emit Liquidated( 
msg.sender, 

_users, 
callerShare, 
feeShare, 
borrowAmount, 


collateralShare 


/// @notice Handles the liquidation of users' balances, once the users' amount of collateral 
is too low. 
/// @dev Closed liquidations Only, 90% of extra shares goes to caller and 10% to protocol 
IIl @param users An array of user addresses. 
[I| @param maxBorrowParts A one-to-one mapping to ‘users’, contains maximum 
(partial) borrow amounts (to liquidate) of the respective user. 
[I| @param swapper Contract address of the ~“MultiSwapper’ implementation. See 
“setSwapper . 
/// @param swapData Swap necessar data 
function _closedLiquidation( 
address[] calldata users, 
uint256[] calldata maxBorrowParts, 
ISwapper swapper, 
uint256 _exchangeRate, 


bytes calldata swapData 


) private { 
uint256 liquidatedCount = 0; 
for (uint256 i = 0; i < users.length; i++) { 
address user = users[i]; 
if (!_isSolvent(user, exchangeRate)) { 
liquidatedCount+ +; 
_liquidateUser( 
user, 
maxBorrowParts[il, 
Swapper, 
_exchangeRate, 


swapData 


} 


require(liquidatedCount > 0, "SGL: no users found"); 


----- E:/Train/makePDF/v1\tapioca-bar-audit-master\contracts\markets\singularity/SGLStorage. 
sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


import "@boringcrypto/boring-solidity/contracts/BoringOwnable.sol"; 
import "@boringcrypto/boring-solidity/contracts/libraries/BoringERC20.sol"; 


import "@boringcrypto/boring-solidity/contracts/libraries/BoringRebase.sol"; 


import "tapioca-periph/contracts/interfaces/ISwapper.sol"; 


import "tapioca-periph/contracts/interfaces/IPenrose.sol"; 


import "tapioca-periph/contracts/interfaces/ISingularity.sol"; 


import "tapioca-periph/contracts/interfaces/ILiquidationQueue.sol"; 


import "tapioca-sdk/dist/contracts/YieldBox/contracts/YieldBox.sol"; 


import "../Market.sol"; 


// solhint-disable max-line-length 
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*/ 


/// @title Singularity storage module 
/// @notice Singularity storage 


contract SGLStorage is BoringOwnable, Market { 


using RebaseLibrary for Rebase; 


using BoringERC20 for IERC20; 


/[/ *** VARS *** // 

/// @notice information about the accrual info 

ISingularity.Accruelnfo public accruelnfo; 

/// @notice total assets share & amount 

Rebase public totalAsset; // elastic = yieldBox shares held by the Singularity, base = Total 
fractions held by asset suppliers 

/// @notice liquidation queue address 


ILiquidationQueue public liquidationQueue; 


// YieldBox shares, from -> Yb asset type -> shares 
mapping(address => mapping(bytes32 => uint256)) internal yieldBoxShares; 
bytes32 internal ASSET SIG = 
0x0bd4060688a1800ae986e4840aebc924bb40b5bf44de4583df2257220b54b77c; // 
keccak256("asset") 
bytes32 internal COLLATERAL SIG = 
0x7d1dc38e60930664f8cbf495da6556ca091d2f92d6550877750c049864b18230; // 
keccak256("collateral") 
/// @notice collateralization rate 


uint256 public lqCollateralizationRate = 25000; // 25% 


uint256 public minimumTargetUtilization; 


uint256 public maximumTargetUtilization; 


uint256 public fullUtilizationMinusMax; 


uint64 public minimumInterestPerSecond; 
uint64 public maximumInterestPerSecond; 
uint256 public interestElasticity; 


uint64 public startinglnterestPerSecond; 


[| *** EVENTS *** // 
/// @notice event emitted when accrual happens 
event LogAccrue( 
uint256 accruedAmount, 
uint256 feeFraction, 
uint64 rate, 
uint256 utilization 
); 
/// @notice event emitted when collateral is added 
event LogAddCollateral( 
address indexed from, 
address indexed to, 
uint256 share 
); 
/// @notice event emitted when asset is added 


event LogAddAsset( 


address indexed from, 

address indexed to, 

uint256 share, 

uint256 fraction 
); 
/// @notice event emitted when collateral is removed 
event LogRemoveCollateral( 

address indexed from, 

address indexed to, 

uint256 share 
); 
/// @notice event emitted when asset is removed 
event LogRemoveAsset( 

address indexed from, 

address indexed to, 

uint256 share, 

uint256 fraction 
); 
/// @notice event emitted when asset is borrowed 
event LogBorrow( 

address indexed from, 

address indexed to, 

uint256 amount, 

uint256 feeAmount, 


uint256 part 


/// @notice event emitted when asset is repayed 
event LogRepay( 

address indexed from, 

address indexed to, 

uint256 amount, 

uint256 part 
); 
/// @notice event emitted when fees are extracted 
event LogWithdrawFees(address indexed feeTo, uint256 feesEarnedFraction); 
/// @notice event emitted when fees are deposited to YieldBox 
event LogYieldBoxFeesDeposit(uint256 feeShares, uint256 ethAmount); 
/// @notice event emitted when the minimum target utilization is updated 
event MinimumTargetuUtilizationUpdated(uint256 oldVal, uint256 newVal); 
/// @notice event emitted when the maximum target utilization is updated 
event MaximumTargetuUtilizationUpdated(uint256 oldVal, uint256 newVal); 
/// @notice event emitted when the minimum interest per second is updated 
event MinimumIinterestPerSecondUpdated(uint256 oldVal, uint256 newVal); 
/// @notice event emitted when the maximum interest per second is updated 
event MaximumInterestPerSecondUpdated(uint256 oldVal, uint256 newVal); 
/// @notice event emitted when the interest elasticity updated 
event InterestElasticityUpdated(uint256 oldVal, uint256 newVal); 
/// @notice event emitted when the LQ collateralization rate is updated 
event LqCollateralizationRateUpdated(uint256 oldVal, uint256 newVal); 
/// @notice event emitted when the order book liquidation multiplier rate is updated 
event OrderBookLiquidationMultiplierUpdated(uint256 oldVal, uint256 newVal); 


/// @notice event emitted when the bid execution swapper is updated 


event BidExecutionSwapperUpdated(address newAddress); 
/// @notice event emitted when the usdo swapper is updated 


event UsdoSwapperUpdated(address newAddress); 


// *** CONSTANTS *** // 
uint256 internal constant FULL_UTILIZATION = 1e18; 


uint256 internal constant UTILIZATION PRECISION = 1e18; 


uint256 internal constant FACTOR PRECISION = 1e18; 


constructor() MarketERC20("Tapioca Singularity") {} 


// *** VIEW FUNCTIONS *** // 
/// @notice returns market's ERC20 symbol 
function symbol() public view returns (string memory) { 
return 
string( 
abi.encodePacked( 

"tm", 

collateral.safeSymbol(), 

i a 


asset.safeSymbol(), 


ou 
r 


oracle.symbol(oracleData) 


/// @notice returns market's ERC20 name 
function name() external view returns (string memory) { 
return 
string( 
abi.encodePacked( 

"Tapioca Singularity ", 

collateral.safeName(), 

eG, 

asset.safeName(), 


oracle.name(oracleData) 


/// @notice returns market's ERC20 decimals 
function decimals() external view returns (uint8) { 


return asset.safeDecimals(); 


/// @notice returns market's ERC20 totalSupply 

/// @dev totalSupply for ERC20 compatibility 

/// | BalanceOf[user] represent a fraction 

function totalSupply() public view override returns (uint256) { 


return totalAsset.base; 


function _accrue() internal virtual override {} 


----- E:/Train/makePDF/v1\tapioca-bar-audit-master\contracts\markets\singularity/Singularity.s 
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// SPDX-License-lIdentifier: UNLICENSED 


pragma solidity *0.8.18; 


import "./SGLCommon.sol"; 
import "./SGLLiquidation.sol"; 
import "./SGLCollateral.sol"; 
import "./SGLBorrow.sol"; 


import "./SGLLeverage.sol"; 


import "tapioca-periph/contracts/interfaces/ISendFrom.sol"; 


import "tapioca-sdk/dist/contracts/libraries/LZLib.sol"; 
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*/ 
/// @title Singularity market 
/// @notice Main Tapioca market 
/// @dev owner of the contract is Penrose 
/// + - contract is split in modules because of the size limit 
IH - each module is responsible with a specific part of the market 


IIL. _- when action is executed, a `delegatecall` is performed to the right module 


III - adding assets to the contract, mints shares to the ‘to’ address which can later be 
used in the oTap & twTap system 

III - interest rate is automatically updated based on the interest elasticity time and it's 
bounded by `minimumlinterestPerSecond` and `maximumlinterestPerSecond` 

contract Singularity is SGLCommon { 


using RebaseLibrary for Rebase; 


// *** VARS *** // 
/// @notice enum representing each type of module associated with a Singularity market 
/// @dev modules are contracts that holds a portion of the market's logic 
enum Module { 
Base, 
Borrow, 
Collateral, 
Liquidation, 
Leverage 
} 
/// @notice returns the liquidation module 
SGLLiquidation public liquidationModule; 
/// @notice returns the borrow module 
SGLBorrow public borrowModule; 
/// @notice returns the collateral module 
SGLCollateral public collateralModule; 


/// @notice returns the leverage module 


SGLLeverage public leverageModule; 


/// @notice The init function that acts as a constructor 
function init(bytes calldata data) external onlyOnce { 
( 
address _liquidationModule, 
address _borrowModule, 
address _collateralModule, 
address _leverageModule, 
IPenrose tapiocaBar_, 
IERC20 asset, 
uint256 _assetld, 
IERC20 collateral, 
uint256 collateralld, 
lOracle _oracle, 
uint256 exchangeRatePrecision 
) = abi.decode( 
data, 
( 

address, 

address, 

address, 

address, 

IPenrose, 

IERC20, 


uint256, 


IERC20, 
uint256, 
lOracle, 


uint256 


liquidationModule = SGLLiquidation(_liquidationModule); 
collateralModule = SGLCollateral(_collateralModule); 
borrowModule = SGLBorrow(_borrowModule); 
leverageModule = SGLLeverage(_leverageModule); 
penrose = tapiocaBar ; 

yieldBox = YieldBox(tapiocaBar_.yieldBox()); 


owner = address(penrose); 


require( 
address(_collateral) != address(0) && 
address(_asset) != address(0) && 
address(_oracle) != address(0), 
"SGL: bad pair" 
); 
asset = _asset; 
collateral = _collateral; 
assetid = _assetld; 
collateralld = _collateralld; 


oracle = _oracle; 


minimumInterestPerSecond = 951293760; // approx 3% APR 
maximumlinterestPerSecond = 2536783360; // approx 8% APR 
interestElasticity = 7200e36; // Half or double in 28800 seconds (1 hours) if linear 


startingInterestPerSecond = minimumIinterestPerSecond; 


accruelnfo.interestPerSecond = uint64(startinglnterestPerSecond); // 1% APR, with 


1e18 being 100% 


updateExchangeRate(); 


//default fees 
callerFee = 1000; // 1% 
protocolFee = 10000; // 10% 


borrowOpeningFee = 50; // 0.05% 


//liquidation 


liquidationMultiplier = 12000; //12% 


collateralizationRate = 75000; 

IqCollateralizationRate = 25000; 

EXCHANGE_RATE_PRECISION = _exchangeRatePrecision > 0 
? _exchangeRatePrecision 


: 1e18; 


minLiquidatorReward = 1e3; 


maxLiquidatorReward = 1e4; 


liquidationBonusAmount = 1e4; 


minimumTargetUtilization = 3e17; 
maximumTargetUtilization = 5e17; 


fullUtilizationMinusMax = FULL UTILIZATION - maximumTargetUtilization; 


// *** VIEW FUNCTIONS *** // 
/// @notice transforms amount to shares for a market's permit operation 
/// @param amount the amount to transform 
/// @param tokenld the YieldBox asset id 
/// @return share amount transformed into shares 
function computeAllowedLendShare( 
uint256 amount, 
uint256 tokenld 
) external view returns (uint256 share) { 
uint256 allShare = totalAsset.elastic + 
yieldBox.toShare(tokenld, totalBorrow.elastic, true); 


share = (amount * allShare) / totalAsset.base; 


/// @notice returns Total yieldBox shares for user 


/// @param _user The user to check shares for 


/// @param _assetid The asset id to check shares for 
/// @return shares value 
function yieldBoxShares( 
address _user, 
uint256 _assetld 
) external view returns (uint256) { 
bytes32 sig = _assetld == assetid ? ASSET SIG : COLLATERAL SIG; 
return 


yieldBox.balanceOf(_user, assetld) + _yieldBoxShares[_user][sig]; 


// *** PUBLIC FUNCTIONS *** // 

/// @notice Allows batched call to Singularity. 

/// @param calls An array encoded call data. 

/// @param revertOnFail If True then reverts after a failed call and stops doing further 
calls. 

/// @return successes count of successful operations 

/// @return results array of revert messages 

function execute( 
bytes[] calldata calls, 
bool revertOnFail 

) external returns (bool[] memory successes, string[] memory results) { 
successes = new bool[](calls.length); 


results = new String[](calls.length); 


for (uint256 i = 0; i < calls.length; i++) { 
(bool success, bytes memory result) = address(this).delegatecall( 
calls[i] 
); 
require(success || !revertOnFail, getRevertMsg(result)); 
successes[i] = success; 


results[i] = _getRevertMsg(result); 


/// @notice Adds assets to the lending pair. 
/// @param from Address to add asset from. 
/// @param to The address of the user to receive the assets. 
/// @param skim True if the amount should be skimmed from the deposit balance of 
msg.sender. 
/// False if tokens from msg.sender in `yieldBox` should be transferred. 
/// @param share The amount of shares to add. 
/// @return fraction Total fractions added. 
function addAsset( 
address from, 
address to, 
bool skim, 
uint256 share 
) public notPaused allowedLend(from, share) returns (uint256 fraction) { 
_accrue(); 


fraction = _addAsset(from, to, skim, share); 


/// @notice Removes an asset from msg.sender and transfers it to ‘to’. 
/// @param from Account to debit Assets from. 
/// @param to The user that receives the removed assets. 
/// @param fraction The amount/fraction of assets held to remove. 
/// @return share The amount of shares transferred to ‘to’. 
function removeAsset( 

address from, 

address to, 

uint256 fraction 
) public notPaused returns (uint256 share) { 

_accrue(); 

share = _removeAsset(from, to, fraction, true); 


_allowedLend(from, share); 


/// @notice Adds ‘collateral’ from msg.sender to the account `to`. 

/// @param from Account to transfer shares from. 

/// @param to The receiver of the tokens. 

/// @param skim True if the amount should be skimmed from the deposit balance of 

msg.sender. 

/// False if tokens from msg.sender in `yieldBox` should be transferred. 

/// @param share The amount of shares to add for ‘to’. 

function addCollateral( 


address from, 


address to, 

bool skim, 

uint256 amount, 

uint256 share 

) public { 

_executeModule( 
Module.Collateral, 
abi.encodeWithSelector( 

SGLCollateral.addCollateral.selector, 
from, 

to, 

skim, 

amount, 


share 


/// @notice Removes ‘share’ amount of collateral and transfers it to `to`. 
//1 @param from Account to debit collateral from. 
/// @param to The receiver of the shares. 
/// @param share Amount of shares to remove. 
function removeCollateral(address from, address to, uint256 share) public { 
_executeModule( 
Module.Collateral, 


abi.encodeWithSelector( 


SGLCollateral.removeCollateral.selector, 
from, 
to, 


share 


/// @notice Sender borrows ‘amount’ and transfers it to ‘to’. 
/// @param from Account to borrow for. 
/// @param to The receiver of borrowed tokens. 
/// @param amount Amount to borrow. 
/// @return part Total part of the debt held by borrowers. 
/// @return share Total amount in shares borrowed. 
function borrow( 
address from, 
address to, 
uint256 amount 
) public returns (uint256 part, uint256 share) { 
bytes memory result = _executeModule( 
Module.Borrow, 
abi.encodeWithSelector(SGLBorrow.borrow.selector, from, to, amount) 
); 


(part, share) = abi.decode(result, (uint256, uint256)); 


/// @notice Repays a loan. 
/// @param from Address to repay from. 
/// @param to Address of the user this payment should go. 
/// @param skim True if the amount should be skimmed from the deposit balance of 
msg.sender. 
/// False if tokens from msg.sender in `yieldBox` should be transferred. 
/// @param part The amount to repay. See “userBorrowPart’. 
/// @return amount The total amount repayed. 
function repay( 
address from, 
address to, 
bool skim, 
uint256 part 
) public returns (uint256 amount) { 
bytes memory result = _executeModule( 
Module.Borrow, 
abi.encodeWithSelector( 
SGLBorrow.repay.selector, 
from, 
to, 
Skim, 


part 


}; 


amount = abi.decode(result, (uint256)); 


/// @notice Lever down: Sell collateral to repay debt; excess goes to YB 
/// @param from The user who sells 
/// @param share Collateral YieldBox-shares to sell 
/// @param minAmountOut Mininal proceeds required for the sale 
[I| @param swapper Swapper to execute the sale 
/// @param dexData Additional data to pass to the swapper 
/// @return amountOut Actual asset amount received in the sale 
function sellCollateral( 
address from, 
uint256 share, 
uint256 minAmountOut, 
ISwapper swapper, 
bytes calldata dexData 
) external returns (uint256 amountOut) { 
bytes memory result = _executeModule( 
Module.Leverage, 
abi.encodeWithSelector( 
SGLLeverage.sellCollateral.selector, 
from, 
share, 
minAmountOut, 
Swapper, 


dexData 


amountOut = abi.decode(result, (uint256)); 


/// @notice Lever up: Borrow more and buy collateral with it. 
/// @param from The user who buys 
[I| @param borrowAmount Amount of extra asset borrowed 
/// @param supplyAmount Amount of asset supplied (down payment) 
[I| @param minAmountOut Mininal collateral amount to receive 
[I| @param swapper Swapper to execute the purchase 
/// @param dexData Additional data to pass to the swapper 
/// @return amountOut Actual collateral amount purchased 
function buyCollateral( 
address from, 
uint256 borrowAmount, 
uint256 supplyAmount, 
uint256 minAmountOut, 
ISwapper swapper, 
bytes calldata dexData 
) external returns (uint256 amountOut) { 
bytes memory result = _executeModule( 
Module.Leverage, 
abi.encodeWithSelector( 
SGLLeverage.buyCollateral.selector, 
from, 
borrowAmount, 


supplyAmount, 


minAmountOut, 
swapper, 


dexData 


); 


amountOut = abi.decode(result, (uint256)); 


/// @notice Level up cross-chain: Borrow more and buy collateral with it. 
[I| @param from The user who sells 
/// @param collateralAmount Extra collateral to be added 
/// @param borrowAmount Borrowed amount that will be swapped into collateral 
//| @param swapData Swap data used on destination chain for swapping USDO to the 
underlying TOFT token 
/// @param |IzData LayerZero specific data 
/// @param externalData External contracts used for the cross chain operation 
function multiHopBuyCollateral( 
address from, 
uint256 collateralAmount, 
uint256 borrowAmount, 
IUSDOBase.ILeverageSwapData calldata swapData, 
IUSDOBase.ILeverageLZData calldata IzData, 
IUSDOBase.|ILeverageExternalContractsData calldata externalData 
) external payable { 
_executeModule( 


Module.Leverage, 


abi.encodeWithSelector( 
SGLLeverage.multiHopBuyCollateral.selector, 
from, 
collateralAmount, 
borrowAmount, 
swapData, 
IzData, 


externalData 


/// @notice Level up cross-chain: Borrow more and buy collateral with it. 

[I| @param from The user who sells 

/// @param share Collateral YieldBox-shares to sell 

//| @param swapData Swap data used on destination chain for swapping USDO to the 
underlying TOFT token 

/// @param |zData LayerZero specific data 

/// @param externalData External contracts used for the cross chain operation 

function multiHopSellCollateral( 
address from, 
uint256 share, 
IUSDOBase.ILeverageSwapData calldata swapData, 
IUSDOBase.|ILeverageLZData calldata IzData, 
IUSDOBase.|ILeverageExternalContractsData calldata externalData 


) external payable { 


_executeModule( 

Module.Leverage, 

abi.encodeWithSelector( 
SGLLeverage.multiHopSellCollateral.selector, 
from, 
share, 
swapData, 
IzData, 


externalData 


/// @notice Entry point for liquidations. 
/// @dev Will call *closedLiquidation()* if not LQ exists or no LQ bid avail exists. Otherwise 
use LQ. 
/// @param users An array of user addresses. 
[I| @param maxBorrowParts A one-to-one mapping to ‘users’, contains maximum 
(partial) borrow amounts (to liquidate) of the respective user. 
Ill Ignore for `orderBookLiquidation()` 
[I| @param swapper Contract address of the `MultiSwapper implementation. See 
‘setSwapper . 
Ill Ignore for `orderBookLiquidation()` 
/// @param collateralToAssetSwapData Extra swap data 
Ill Ignore for `orderBookLiquidation()` 


/// @param usdoToBorrowedSwapData Extra swap data 


IH Ignore for `closedLiquidation()` 
function liquidate( 
address[] calldata users, 
uint256[] calldata maxBorrowParts, 
ISwapper swapper, 
bytes calldata collateralToAssetSwapData, 
bytes calldata usdoToBorrowedSwapData 
) external { 
_executeModule( 
Module.Liquidation, 
abi.encodeWithSelector( 
SGLLiquidation.liquidate.selector, 
users, 
maxBorrowParts, 
Swapper, 
collateralToAssetSwapData, 


usdoToBorrowedSwapData 


/// @notice Withdraw the fees accumulated in “accruelnfo.feesEarnedFraction’ to the 
balance of `feeTo`. 
function withdrawFeesEarned() public { 
_accrue(); 


address _feeTo = penrose.feeTo(); 


uint256 feesEarnedFraction = accruelnfo.feesEarnedFraction; 
balanceOf[_feeTo] += feesEarnedFraction; 

emit Transfer(address(0), feeTo, feesEarnedFraction); 
accruelnfo.feesEarnedFraction = 0; 


emit LogWithdrawFees(_feeTo, feesEarnedFraction); 


// *** OWNER FUNCTIONS *** // 

/// @notice Transfers fees to penrose 

/// @dev can only be called by the owner 

/// @param feeTo fees receiver 

function refreshPenroseFees( 
address feeTo 

) external onlyOwner notPaused returns (uint256 feeShares) { 
if (accrueInfo.feesEarnedFraction > 0) { 


withdrawFeesEarned(); 


feeShares = _removeAsset(feeTo, msg.sender, balanceOf[feeTol], false); 


/// @notice sets Singularity specific configuration 
/// @dev values are updated only if > 0 or not address(0) 


function setSingularityConfig( 


uint256 _lqCollateralizationRate, 
uint256 _liquidationMultiplier, 
uint256 _minimumTargetUtilization, 
uint256 maximumTargetuUtilization, 
uint64 _minimuminterestPerSecond, 
uint64 _maximumlnterestPerSecond, 
uint256 _interestElasticity 
) external onlyOwner { 
if (_minimumTargetuUtilization > 0) { 
emit MinimumTargetUtilizationUpdated( 
minimumTargetUtilization, 
_minimumTargetuUtilization 
); 


minimumTargetUtilization = _minimumTargetUtilization; 


if (_maximumTargetUtilization > 0) { 

require( 
_maximumTargetUtilization < FULL_UTILIZATION, 
"SGL: not valid" 

); 

emit MaximumTargetuUtilizationUpdated( 
maximumTargetuUtilization, 
_maximumTargetuUtilization 

); 


maximumTargetuUtilization = _maximumTargetuUtilization; 


fullUtilizationMinusMax = 
FULL_UTILIZATION - 


maximumTargetuUtilization; 


if (_minimumInterestPerSecond > 0) { 

require( 
_minimumInterestPerSecond < maximuminterestPerSecond, 
"SGL: not valid" 

); 

emit MinimumInterestPerSecondUpdated( 
minimumInterestPerSecond, 
_minimumInterestPerSecond 

); 


minimumInterestPerSecond = _minimumlInterestPerSecond; 


if (_maximumInterestPerSecond > 0) { 
require( 
_maximumInterestPerSecond > minimumlInterestPerSecond, 
"SGL: not valid" 
); 
emit MaximuminterestPerSecondUpdated( 
maximumInterestPerSecond, 


_maximumInterestPerSecond 


maximumInterestPerSecond = _maximumlInterestPerSecond; 


if (_interestElasticity > 0) { 
emit InterestElasticityUpdated( 
interestElasticity, 
_interestElasticity 
); 


interestElasticity = _interestElasticity; 


if (_lqCollateralizationRate > 0) { 

require( 
_IqCollateralizationRate <= FEE PRECISION, 
"SGL: not valid" 

); 

emit LqCollateralizationRateUpdated( 
IqCollateralizationRate, 
_IqCollateralizationRate 

); 


IqCollateralizationRate = _lqCollateralizationRate; 


if (_liquidationMultiplier > 0) { 
require(_liquidationMultiplier < FEE PRECISION, "SGL: not valid"); 


emit LiquidationMultiplierUpdated( 


liquidationMultiplier, 
_liquidationMultiplier 
); 


liquidationMultiplier = _liquidationMultiplier; 


/// @notice sets LQ specific confinguration 
function setLiquidationQueueConfig( 
ILiquidationQueue _liquidationQueue, 
address _bidExecutionSwapper, 
address _usdoSwapper 
) external onlyOwner { 
if (address(_liquidationQueue) != address(0)) { 
require(_liquidationQueue.onlyOnce(), "SGL: LQ not initalized"); 


liquidationQueue = _liquidationQueue; 


if (_ bidExecutionSwapper != address(0)) { 
emit BidExecutionSwapperUpdated(_bidExecutionSwapper); 


liquidationQueue.setBidExecutionSwapper(_bidExecutionSwapper); 


if ( usdoSwapper != address(0)) { 
emit UsdoSwapperUpdated(_usdoSwapper); 


liquidationQueue.setUsdoSwapper(_usdoSwapper); 


// *** PRIVATE FUNCTIONS *** // 
// PRR ERE R ERRORS OOK. // 
function _extractModule(Module _module) private view returns (address) { 
address module; 
if (_ module == Module.Borrow) { 
module = address(borrowModule); 
} else if (_ module == Module.Collateral) { 
module = address(collateralModule); 
} else if (_ module == Module.Liquidation) { 
module = address(liquidationModule); 
} else if (module == Module.Leverage) { 
module = address(leverageModule); 
} 
if (module == address(0)) { 


revert("SGL: module not set"); 


return module; 


function executeModule( 


Module module, 


bytes memory data 
) private returns (bytes memory returnData) { 
bool success = true; 


address module = _extractModule(_module); 


(success, returnData) = module.delegatecall(_ data); 
if ('success) { 


revert(_getRevertMsg(returnData)); 


function executeViewModule( 
Module module, 
bytes memory data 

) private view returns (bytes memory returnData) { 
bool success = true; 


address module = _extractModule(_module); 


(success, returnData) = module.staticcall(_data); 


if ('success) { 


revert(_getRevertMsg(returnData)); 


receive() external payable {} 


----- E:/Train/makePDF/v1\tapioca-bar-audit-master\contracts\usd0/BaseUSDO.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


[EZ 


import "tapioca-sdk/dist/contracts/token/oft/v2/OFTV2.sol"; 


//0Z 
import "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol"; 


import "@openzeppelin/contracts/token/ERC20/extensions/draft-ERC20Permit.sol"; 


/[TAPIOCA 
import "tapioca-periph/contracts/interfaces/lYieldBoxBase.sol"; 
import {IUSDOBase} from "tapioca-periph/contracts/interfaces/IUSDO.sol"; 


import "tapioca-periph/contracts/interfaces/ICommonData.sol"; 


import "./BaseUSDOStorage.sol"; 
import "./modules/USDOLeverageModule.sol"; 
import "./modules/USDOMarketModule.sol"; 


import "./modules/USDOOptionsModule.sol"; 
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/// @title BaseUSDO contract 


/// @notice Common USDO capabilitites 
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/// @dev all LayerZero methods are defined here 


contract BaseUSDO is BaseUSDOStorage, ERC20Permit { 


using SafeERC20 for IERC20; 
using BytesLib for bytes; 


enum Module { 
Leverage, 
Market, 


Options 


/// @notice returns the leverage module 


USDOLeverageModule public leverageModule; 


/// @notice returns the market module 


USDOMarketModule public marketModule; 


/// @notice returns the options module 


USDOOptionsModule public optionsModule; 


constructor( 
address _|zEndpoint, 
lYieldBoxBase _yieldBox, 
address owner, 
address payable leverageModule, 
address payable _marketModule, 
address payable optionsModule 
) BaseUSDOStorage(_IzEndpoint, _yieldBox) ERC20Permit("USDO") { 
leverageModule = USDOLeverageModule(_leverageModule); 


marketModule = USDOMarketModule(_marketModule); 


optionsModule = USDOOptionsModule(_optionsModule); 


transferOwnership(_owner); 


// *** OWNER FUNCTIONS *** // 

/// @notice set the max allowed USDO mintable through flashloan 

/// @dev can only be called by the owner 

/// @param _val the new amount 

function setMaxFlashMintable(uint256 val) external onlyOwner { 
emit MaxFlashMintUpdated(maxFlashMint, _val); 


maxFlashMint = _val; 


/// @notice set the flashloan fee 

/// @dev can only be called by the owner 

/// @param _val the new fee 

function setFlashMintFee(uint256 val) external onlyOwner { 
require(_val < FLASH_MINT_FEE_PRECISION, "USDO: fee too big"); 
emit FlashMintFeeUpdated(flashMintFee, val); 


flashMintFee = _val; 


/// @notice set the Conservator address 


/// @dev conservator can pause the contract 


/// @param _conservator the new address 

function setConservator(address conservator) external onlyOwner { 
require(_conservator != address(0), "USDO: address not valid"); 
emit ConservatorUpdated(conservator, conservator); 


conservator = _conservator; 


/// @notice updates the pause state of the contract 

/// @dev can only be called by the conservator 

/// @param val the new value 

function updatePause(bool val) external { 
require(msg.sender == conservator, "USDO: unauthorized"); 
require(val != paused, "USDO: same state"); 
emit PausedUpdated(paused, val); 


paused = val; 


/// @notice sets/unsets address as minter 

/// @dev can only be called by the owner 

/// @param _for role receiver 

/// @param _status true/false 

function setMinterStatus(address for, bool status) external onlyOwner { 
allowedMinter[_getChainld()][_for] = _status; 


emit SetMinterStatus(_for, status); 


/// @notice sets/unsets address as burner 

/// @dev can only be called by the owner 

/// @param _for role receiver 

/// @param _status true/false 

function setBurnerStatus(address for, bool status) external onlyOwner { 
allowedBurner[_getChainld()][_for] = _status; 


emit SetBurnerStatus(_for, status); 


// *** VIEW FUNCTIONS *** // 
/// @notice returns token's decimals 
function decimals() public pure override returns (uint8) { 


return 18; 


// *** PUBLIC FUNCTIONS *** // 


/// @notice triggers a sendFrom to another layer from destination 
/// @param |zDstChainld LZ destination id 

/// @param airdropAdapterParams airdrop params 

/// @param zroPaymentAddress ZRO payment address 


/// @param amount amount to send back 


//| @param sendFromData data needed to trigger sendFrom on destination 
/// @param approvals approvals array 
function triggerSendFrom( 
uint16 IzDstChainld, 
bytes calldata airdropAdapterParams, 
address zroPaymentAddress, 
uint256 amount, 
ISendFrom.LzCallParams calldata sendFromData, 
ICommonData.lApproval[] calldata approvals 
) external payable { 
_executeModule( 
Module.Options, 
abi.encodeWithSelector( 
USDOOptionsModule.triggerSendFrom.selector, 
IzDstChainld, 
airdropAdapterParams, 
zroPaymentAddress, 
amount, 
sendFromData, 


approvals 


/// @notice Exercise an oTAP position 


/// @param optionsData oTap exerciseOptions data 
/// @param |zData data needed for the cross chain transer 
/// @param tapSendData needed for withdrawing Tap token 
/// @param approvals array 
function exerciseOption( 
ITapiocaOptionsBrokerCrossChain.lExerciseOptionsData 
calldata optionsData, 
ITapiocaOptionsBrokerCrossChain.|IExerciseLZData calldata IzData, 
ITapiocaOptionsBrokerCrossChain.lExerciseLZSendTapData 
calldata tapSendData, 
ICommonData.!|Approval[] calldata approvals 
) external payable { 
_executeModule( 
Module.Options, 
abi.encodeWithSelector( 
USDOOptionsModule.exerciseOption.selector, 
optionsData, 
IzData, 
tapSendData, 


approvals 


/// @notice inits multiHopBuyCollateral 


/// @param from The user who sells 
/// @param collateralAmount Extra collateral to be added 
/// @param borrowAmount Borrowed amount that will be swapped into collateral 
/// @param swapData Swap data used on destination chain for swapping USDO to the 
underlying TOFT token 
/// @param |zData LayerZero specific data 
/// @param externalData External contracts used for the cross chain operation 
[I| @param approvals array 
function initMultiHopBuy( 
address from, 
uint256 collateralAmount, 
uint256 borrowAmount, 
IUSDOBase.ILeverageSwapData calldata swapData, 
IUSDOBase.ILeverageLZData calldata IzData, 
IUSDOBase.ILeverageExternalContractsData calldata externalData, 
bytes calldata airdropAdapterParams, 
ICommonData.lApproval[] memory approvals 
) external payable { 
_executeModule( 
Module.Leverage, 
abi.encodeWithSelector( 
USDOLeverageModule.initMultiHopBuy.selector, 
from, 
collateralAmount, 
borrowAmount, 


swapData, 


IzData, 
externalData, 
airdropAdapterParams, 


approvals 


/// @notice calls removeAssetAndRepay on Magnetar from the destination layer 
/// @param from sending address 
/// @param to receiver address 
/// @param |IzDstChainld LayerZero destination chain id 
/// @param zroPaymentAddress ZRO payment address 
/// @param adapterParams LZ adapter params 
/// @param externalData external addresses needed for the operation 
/// @param removeAndRepayData removeAssetAndRepay params 
/// @param approvals approvals params 
function removeAsset( 
address from, 
address to, 
uint16 IzDstChainld, 
address zroPaymentAddress, 
bytes calldata adapterParams, 
ICommonData.ICommoneExternalContracts calldata externalData, 


IUSDOBase.IRemoveAndRepay calldata removeAndRepayData, 


ICommonData.!Approval[] calldata approvals 
) external payable { 
_executeModule( 
Module.Market, 
abi.encodeWithSelector( 
USDOMarketModule.removeAsset.selector, 
from, 
to, 
IzDstChainld, 
zroPaymentAddress, 
adapterParams, 
externalData, 
removeAndRepayData, 


approvals 


/// @notice sends USDO to a specific chain and performs a leverage up operation 
/// @param amount the amount to use 

/// @param leverageFor the receiver address 

/// @param |zData LZ specific data 

/// @param swapData ISwapper specific data 

/// @param externalData external contracts used for the flow 


function sendForLeverage( 


uint256 amount, 
address leverageFor, 
IUSDOBase.ILeverageLZData calldata IzData, 
IUSDOBase.ILeverageSwapData calldata swapData, 
IUSDOBase.|LeverageExternalContractsData calldata externalData 
) external payable { 
_executeModule( 
Module.Leverage, 
abi.encodeWithSelector( 
USDOLeverageModule.sendForLeverage.selector, 
amount, 
leverageFor, 
IzData, 
swapData, 


externalData 


/// @notice sends to YieldBox over layer and lends asset to market 
/// @param _from sending address 

IIl @param _to receiver address 

/// @param |IzDstChainld LayerZero destination chain id 

/// @param lendParams lend specific params 


/// @param approvals approvals specific params 


/// @param withdrawParams parameter to withdraw the SGL collateral 
/// @param adapterParams adapter params of the withdrawn collateral 
function sendAndLendOrRepay( 
address from, 
address to, 
uint16 IzDstChainld, 
address zroPaymentAddress, 
IUSDOBase.ILendOrRepayParams calldata lendParams, 
ICommonData.lApproval[] calldata approvals, 
ICommonData.IWithdrawParams calldata withdrawParams, 
bytes calldata adapterParams 
) external payable { 
_executeModule( 
Module.Market, 
abi.encodeWithSelector( 
USDOMarketModule.sendAndLendOrRepay.selector, 
_from, 
_to, 
IzDstChainld, 
zroPaymentAddress, 
lendParams, 
approvals, 
withdrawParams, 


adapterParams 


false 


// *** PRIVATE FUNCTIONS *** // 


function _extractModule(Module _module) private view returns (address) { 
address module; 
if (module == Module.Leverage) { 
module = address(leverageModule); 
} else if (module == Module.Market) { 
module = address(marketModule); 
} else if (module == Module.Options) { 


module = address(optionsModule); 


if (module == address(0)) { 


revert("USDO: module not found"); 


return module; 


function executeModule( 


Module module, 


bytes memory data, 
bool forwardRevert 

) private returns (bool success, bytes memory returnData) { 
success = true; 


address module = _extractModule(_module); 


(success, returnData) = module.delegatecall(_ data); 
if (‘success && ! forwardRevert) { 


revert(_getRevertMsg(returnData)); 


function executeOnDestination( 
Module module, 
bytes memory data, 
uint16 _srcChainld, 
bytes memory _srcAddress, 
uint64 nonce, 
bytes memory _payload 
) private { 
(bool success, bytes memory returnData) = _executeModule( 
_module, 
_data, 
true 
); 


if (!Isuccess) { 


_storeFailedMessage( 
_srcChainld, 
_srcAddress, 
_nonce, 

_payload, 


returnData 


function _nonblockingLzReceive( 
uint16 _srcChainld, 
bytes memory _srcAddress, 
uint64 nonce, 
bytes memory _payload 

) internal virtual override { 


uint256 packetType = _payload.toUint256(0); 


if (packetType == PT_YB SEND _SGL_LEND_OR REPAY) { 
_executeOnDestination( 
Module.Market, 
abi.encodeWithSelector( 
USDOMarketModule.lend.selector, 
marketModule, 
_srcChainld, 


_srcAddress, 


_nonce, 
_payload 
), 
_srcChainld, 
_srcAddress, 
_nonce, 
_payload 
); 
} else if (packetType == PT_LEVERAGE MARKET UP) { 
_executeOnDestination( 
Module.Leverage, 
abi.encodeWithSelector( 
USDOLeverageModule.leverageUp.selector, 
leverageModule, 
_srcChainld, 
_srcAddress, 
_nonce, 
_payload 
), 
_srcChainld, 
_srcAddress, 
_nonce, 
_payload 
); 
} else if (packetType == PT_MARKET_REMOVE_ASSET) { 


_executeOnDestination( 


Module.Market, 
abi.encodeWithSelector( 
USDOMarketModule.remove.selector, 
_payload 
), 
_srcChainld, 
_srcAddress, 
_nonce, 
_payload 
); 
} else if (packetType == PT_MARKET_ MULTIHOP BUY) { 
_executeOnDestination( 
Module.Leverage, 
abi.encodeWithSelector( 
USDOLeverageModule.multiHop.selector, 
_payload 
), 
_srcChainld, 
_srcAddress, 
_nonce, 
_payload 
); 
} else if (packetType == PT_TAP_EXERCISE) { 
_executeOnDestination( 
Module.Options, 


abi.encodeWithSelector( 


USDOOptionsModule.exercise.selector, 
optionsModule, 
_srcChainld, 
_srcAddress, 
_nonce, 
_payload 
), 
_srcChainld, 
_srcAddress, 
_nonce, 
_payload 
); 
} else if (packetType == PT_SEND FROM) { 
_executeOnDestination( 
Module.Options, 
abi.encodeWithSelector( 
USDOOptionsModule.sendFromDestination.selector, 
_payload 
), 
_srcChainld, 
_srcAddress, 
_nonce, 
_payload 
); 
} else { 


packetType = _payload.toUint8(0); 


if (packetType == PT_SEND) { 
_sendAck(_srcChainld, srcAddress, nonce, payload); 
} else if (packetType == PT SEND_AND CALL) { 
_sendAndCallAck(_srcChainld, srcAddress, nonce, payload); 
} else { 


revert("OFTCoreV2: unknown packet type"); 


----- E:/Train/makePDF/v1\tapioca-bar-audit-master\contracts\usd0/BaseUSDOStorage.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


[EZ 


import "tapioca-sdk/dist/contracts/token/oft/v2/OFTV2.sol"; 


//0Z 
import "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol"; 


import "@openzeppelin/contracts/token/ERC20/extensions/draft-ERC20Permit.sol"; 


/[TAPIOCA 
import "tapioca-periph/contracts/interfaces/lYieldBoxBase.sol"; 


import {IUSDOBase} from "tapioca-periph/contracts/interfaces/IUSDO.sol"; 


/// @title USDO storage module 

/// @notice USDO storage 

contract BaseUSDOStorage is OFTV2 { 
/// @notice the YieldBox address. 


lYieldBoxBase public immutable yieldBox; 


/// @notice returns the Conservator address 
address public conservator; 

/// @notice addresses allowed to mint USDO 
[II @dev chainld>address>status 


mapping(uint256 => mapping(address => bool)) public allowedMinter; 


/// @notice addresses allowed to burn USDO 

/// @dev chainld>address>status 

mapping(uint256 => mapping(address => bool)) public allowedBurner; 
/// @notice returns the pause state of the contract 


bool public paused; 


/// @notice returns the flash mint fee 
uint256 public flashMintFee; 
/// @notice returns the maximum amount of USDO that can be minted through the 
EIP-3156 flow 


uint256 public maxFlashMint; 


uint256 internal constant FLASH_MINT_FEE PRECISION = 1e6; 
bytes32 internal constant FLASH _MINT_ CALLBACK SUCCESS = 


keccak256("ERC3156FlashBorrower.onFlashLoan"); 


uintl6 internal constant PT_ MARKET _MULTIHOP_BUY = 772; 

uintl6 internal constant PT_ MARKET _REMOVE_ASSET = 773; 
uintl6 internal constant PT_YB_ SEND SGL_LEND_OR_REPAY = 774; 
uintl6 internal constant PT_LEVERAGE_MARKET_UP = 775; 

uintl6 internal constant PT_TAP_EXERCISE = 777; 


uint16 internal constant PT_ SEND_FROM = 778; 


// °°" EVENTS *** // 


/// @notice event emitted when USDO is minted 

event Minted(address indexed for, uint256 amount); 

/// @notice event emitted when USDO is burned 

event Burned(address indexed from, uint256 amount); 

/// @notice event emitted when a new address is set or removed from minters array 
event SetMinterStatus(address indexed for, bool status); 

/// @notice event emitted when a new address is set or removed from burners array 
event SetBurnerStatus(address indexed for, bool status); 

/// @notice event emitted when conservator address is updated 

event ConservatorUpdated(address indexed old, address indexed _new); 

/// @notice event emitted when pause state is updated 

event PausedUpdated(bool oldState, bool newState); 

/// @notice event emitted when flash mint fee is updated 

event FlashMintFeeUpdated(uint256 old, uint256 new); 

/// @notice event emitted when max flash mintable amount is updated 


event MaxFlashMintUpdated(uint256 old, uint256 new); 


receive() external payable {} 


constructor( 
address _1|zEndpoint, 
lYieldBoxBase _yieldBox 

) OFTV2("USDO", "USDO", 8, IzEndpoint) { 
uint256 chain = _getChainld(); 
allowedMinter[chain][msg.sender] = true; 


allowedBurner[chain][msg.sender] = true; 


flashMintFee = 10; // 0.001% 


maxFlashMint = 100_000 * 1e18; // 100k USDO 


yieldBox = _yieldBox; 


function _getChainld() internal view returns (uint256) { 


return ILayerZeroEndpoint(IzEndpoint).getChainld(); 


function getRevertMsg( 
bytes memory _returnData 
) internal pure returns (string memory) { 
// If the _res length is less than 68, then the transaction failed silently (without a revert 
message) 
if (_returnData.length < 68) return "USDO: no return data"; 
// solhint-disable-next-line no-inline-assembly 
assembly { 
// Slice the sighash. 
_returnData := add(_returnData, 0x04) 


} 


return abi.decode(_returnData, (string)); // All that remains is the revert string 


----- E:/Train/makePDF/v1\tapioca-bar-audit-master\contracts\usd0/USDO.sol---- 


// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


import "tapioca-sdk/dist/contracts/interfaces/ILayerZeroEndpoint.sol"; 


import "tapioca-periph/contracts/interfaces/IERC3156FlashLender.sol"; 


import "./BaseUSDO.sol"; 


/* 
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/// @title USDO OFT contract 

/// @notice Tapioca omnichain stablecoin 

contract USDO is BaseUSDO, IERC3156FlashLender { 
modifier notPaused() { 


require(!paused, "USDO: paused"); 


/// @notice creates a new USDOO OFT contract 

/// @param _lzEndpoint LayerZero endpoint 

//1 @param _yieldBox the YieldBox address 

/// @param _owner owner address 

/// @param _leverageModule USDOLeverageModule address 


constructor( 


address _|zEndpoint, 
lYieldBoxBase _yieldBox, 

address owner, 

address payable leverageModule, 
address payable _marketModule, 


address payable optionsModule 


BaseUSDO( 
_IzEndpoint, 
_yieldBox, 
_owner, 
_leverageModule, 
_marketModule, 


_optionsModule 


{} 


// *** VIEW FUNCTIONS *** // 


/// @notice returns the maximum amount of tokens available for a flash mint 
function maxFlashLoan(address) public view override returns (uint256) { 


return maxFlashMint; 


/// @notice returns the flash mint fee 


/// @param token USDO address 
/// @param amount the amount for which fee is computed 
function flashFee( 
address token, 
uint256 amount 
) public view override returns (uint256) { 
require(token == address(this), "USDO: token not valid"); 


return (amount * flashMintFee) / FLASH_MINT_FEE PRECISION; 


// *** PUBLIC FUNCTIONS *** // 
/// @notice performs a USDO flashloan 
/// @param receiver the IERC3156FlashBorrower receiver 
/// @param token USDO address 
/// @param amount the amount to flashloan 
/// @param data flashloan data 
/// @return operation execution status 
function flashLoan( 

IERC3156FlashBorrower receiver, 

address token, 

uint256 amount, 

bytes calldata data 
) external override notPaused returns (bool) { 


require(token == address(this), "USDO: token not valid"); 


require(maxFlashLoan(token) >= amount, "USDO: amount too big"); 
require(amount > 0, "USDO: amount not valid"); 
uint256 fee = flashFee(token, amount); 


_mint(address(receiver), amount); 


require( 
receiver.onFlashLoan(msg.sender, token, amount, fee, data) == 
FLASH MINT CALLBACK SUCCESS, 


"USDO: failed" 


uint256 allowance = allowance(address(receiver), address(this)); 
require(_allowance >= (amount + fee), "USDO: repay not approved"); 
_approve(address(receiver), address(this), allowance - (amount + fee)); 
_burn(address(receiver), amount + fee); 


return true; 


/// @notice mints USDO 


/// @param _to receiver address 


/// @param _amount the amount to mint 


function mint(address to, uint256 amount) external notPaused { 


require(allowedMinter[_getChainld()][msg.sender], "USDO: unauthorized"); 
_mint(_to, amount); 


emit Minted(_to, amount); 


/// @notice burns USDO 

/// @param _from address to burn from 

/// @param _amount the amount to burn 

function burn(address from, uint256 amount) external notPaused { 
require(allowedBurner[_getChainld()][msg.sender], "USDO: unauthorized"); 
_burn(_from, _amount); 


emit Burned(_from, _amount); 


----- E:/Train/makePDF/v1\tapioca-bar-audit-master\contracts\usd0\modules/USDOLeverageM 
odule.sol---- 
// SPDX-License-ldentifier: UNLICENSED 


pragma solidity *0.8.18; 


HLZ 


import "tapioca-sdk/dist/contracts/libraries/LZLib.sol"; 


/[TAPIOCA 

import {IUSDOBase} from "tapioca-periph/contracts/interfaces/IUSDO.sol"; 
import "tapioca-periph/contracts/interfaces/ISwapper.sol"; 

import "tapioca-periph/contracts/interfaces/ITapiocaOFT.sol"; 

import "tapioca-periph/contracts/interfaces/ISingularity.sol"; 

import "tapioca-periph/contracts/interfaces/IPermitBorrow.sol"; 


import "tapioca-periph/contracts/interfaces/IPermitAll.sol"; 


import "../BaseUSDOStorage.sol"; 


/// @title USDO leverage module 
/// @notice USDO module for leverage type actions 
contract USDOLeverageModule is BaseUSDOStorage { 


using SafeERC20 for IERC20; 


constructor( 
address _|zEndpoint, 


lYieldBoxBase _yieldBox 


) BaseUSDOStorage(_IzEndpoint, yieldBox) {} 


function initMultiHopBuy( 
address from, 
uint256 collateralAmount, 
uint256 borrowAmount, 
IUSDOBase.ILeverageSwapData calldata swapData, 
IUSDOBase.|LeverageLZData calldata IzData, 
IUSDOBase.|LeverageExternalContractsData calldata externalData, 
bytes calldata airdropAdapterParams, 
ICommonData.!Approval[] calldata approvals 

) external payable { 


bytes32 senderBytes = LzLib.addressToBytes32(from); 


bytes memory IzPayload = abi.encode( 
PT MARKET MULTIHOP BUY, 
senderBytes, 
from, 
collateralAmount, 
borrowAmount, 
swapData, 
IzData, 
externalData, 


approvals 


_IzSend( 
IzData.IzSrcChainld, 
IzPayload, 
payable(IzData.refundAddress), 
IzData.zroPaymentAddress, 
airdropAdapterParams, 
msg.value 

); 


emit SendToChain(IzData.IzSrcChainld, msg.sender, senderBytes, 0); 


function sendForLeverage( 
uint256 amount, 
address leverageFor, 
IUSDOBase.ILeverageLZData calldata IzData, 
IUSDOBase.ILeverageSwapData calldata swapData, 
IUSDOBase.|ILeverageExternalContractsData calldata externalData 
) external payable { 
bytes32 senderBytes = LzLib.addressToBytes32(msg.sender); 


_debitFrom(msg.sender, IzEndpoint.getChainld(), senderBytes, amount); 


bytes memory IzPayload = abi.encode( 
PT_LEVERAGE_MARKET_UP, 
senderBytes, 
amount, 


swapData, 


externalData, 
IzData, 


leverageFor 


_IzSend( 
IzData.IzDstChainld, 
IzPayload, 
payable(IzData.refundAddress), 
IzData.zroPaymentAddress, 
IzData.dstAirdropAdapterParam, 
msg.value 

); 


emit SendToChain(|zData.IzDstChainld, msg.sender, senderBytes, amount); 


function multiHop(bytes memory _payload) public { 


( 


rd 


address from, 

uint256 collateralAmount, 

uint256 borrowAmount, 
IUSDOBase.lLeverageSwapData memory swapData, 
IUSDOBase.lLeverageLZData memory IzData, 


IUSDOBase.lLeverageExternalContractsData memory externalData, 


ICommonData.IApproval[] memory approvals 
) = abi.decode( 

_payload, 

( 
uint16, 
bytes32, 
address, 
uint256, 
uint256, 
IUSDOBase.|ILeverageSwapData, 
l\USDOBase.|ILeverageLZData, 
IUSDOBase.|LeverageExternalContractsData, 


ICommonData.IApproval[] 


if (approvals.length > 0) { 


_callApproval(approvals); 


ISingularity(externalData.srcMarket).multiHopBuyCollateral( 
from, 
collateralAmount, 
borrowAmount, 
swapData, 


IzData, 


externalData 


function leverageUp( 
address module, 
uint16 _srcChainld, 
bytes memory _srcAddress, 
uint64 nonce, 
bytes memory _payload 
) public { 
( 


LA 


uint256 amount, 
IUSDOBase.lLeverageSwapData memory swapData, 
IUSDOBase.lLeverageExternalContractsData memory externalData, 
IUSDOBase.!|LeverageLZData memory I|zData, 
address leverageFor 
) = abi.decode( 
_payload, 
( 
uint16, 
bytes32, 
uint256, 


IUSDOBase.|LeverageSwapData, 


IUSDOBase.|LeverageExternalContractsData, 
IUSDOBase.|ILeverageLZData, 


address 


uint256 balanceBefore = balanceOf(address(this)); 
bool credited = creditedPackets[_srcChainld][_srcAddress][_nonce]; 
if (!credited) { 
_creditTo(_srcChainld, address(this), amount); 
creditedPackets[_srcChainld][_srcAddress][_nonce] = true; 
} 


uint256 balanceAfter = balanceOf(address(this)); 


(bool success, bytes memory reason) = module.delegatecall( 
abi.encodeWithSelector( 
this.leverageUpInternal.selector, 
amount, 
swapData, 
externalData, 
IzData, 


leverageFor 


if ('success) { 


if (balanceAfter - balanceBefore >= amount) { 


IERC20(address(this)).safeTransfer(leverageFor, amount); 


revert(_getRevertMsg(reason)); //forward revert because it's handled by the main 


executor 


} 


emit ReceiveFromChain(_srcChainld, leverageFor, amount); 


function leverageUpInternal( 
uint256 amount, 
IUSDOBase.|LeverageSwapData memory swapData, 
IUSDOBase.ILeverageExternalContractsData memory externalData, 
IUSDOBase.ILeverageLZData memory I|zData, 
address leverageFor 
) public payable { 
//swap from USDO 
_approve(address(this), externalData.swapper, amount); 
ISwapper.SwapData memory _swapperData = ISwapper(externalData.swapper) 
.buildSwapData( 
address(this), 
swapData.tokenOut, 
amount, 
O, 


false, 


false 


(uint256 amountOut, ) = ISwapper(externalData.swapper).swap( 
_swapperData, 
swapData.amountOutMin, 
address(this), 


SwapData.data 


//wrap into tOFT 
IERC20(SwapData.tokenOut).approve(externalData.tOft, amountOut); 
ITapiocaOFTBase(externalData.tOft).wrap( 

address(this), 

address(this), 


amountOut 


//send to YB & deposit 
ICommonData.IApproval[] memory approvals; 
ITapiocaOFT(externalData.tOft).sendToYBAndBorrow{ 
value: address(this).balance 
}( 
address(this), 
leverageFor, 


IzData.IzSrcChainld, 


IzData.srcAirdropAdapterParam, 

ITapiocaOFT.IBorrowParams({ 
amount: amountOut, 
borrowAmount: 0, 
marketHelper: externalData.magnetar, 
market: externalData.srcMarket 

}), 

ICommonData.IWithdrawParams({ 
withdraw: false, 
withdrawLzFeeAmount: 0, 
withdrawOnOtherChain: false, 
withdrawLzChainld: O, 
withdrawAdapterParams: "0x" 

}), 

ICommonData.ISendOptions({ 
extraGasLimit: IzData.srcExtraGasLimit, 
zroPaymentAddress: IzData.zroPaymentAddress 

}), 


approvals 


function _callApproval(ICommonData.lApproval[] memory approvals) private { 
for (uint256 i = 0; i < approvals.length; ) { 
if (approvals[i].permitBorrow) { 


try 


IPermitBorrow(approvals[i].target).permitBorrow( 
approvals[i].owner, 
approvals[i].spender, 
approvals[i].value, 
approvals[i].deadline, 
approvals[i].v, 
approvals[i].r, 
approvals[i].s 

) 

{} catch Error(string memory reason) { 
if (!approvals[i].allowFailure) { 


revert(reason); 


} 
} else if (approvals[i].permitAll) { 
try 
IPermitAll(approvals[i].target).permitAll( 
approvals[i].owner, 
approvals[i].spender, 
approvals[i].deadline, 
approvals[i].v, 
approvals[i].r, 
approvals[i].s 
) 
{} catch Error(string memory reason) { 


if (tapprovals[i].allowFailure) { 


revert(reason); 


try 
IERC20Permit(approvals[i].target).permit( 
approvals[i].owner, 
approvals[i].spender, 
approvals[i].value, 
approvals[i].deadline, 
approvals[i].v, 
approvals[i].r, 
approvals[i].s 
) 
{} catch Error(string memory reason) { 
if (!approvals[i].allowFailure) { 


revert(reason); 


unchecked { 


++i; 


----- E:/Train/makePDF/v1\tapioca-bar-audit-master\contracts\usd0\modules/USDOMarketMod 
ule.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


HLZ 


import "tapioca-sdk/dist/contracts/libraries/LZLib.sol"; 


/[TAPIOCA 

import "@boringcrypto/boring-solidity/contracts/libraries/BoringRebase.sol"; 
import {IUSDOBase} from "tapioca-periph/contracts/interfaces/IUSDO.sol"; 
import "tapioca-periph/contracts/interfaces/ITapiocaOFT.sol"; 

import "tapioca-periph/contracts/interfaces/IMagnetar.sol"; 

import "tapioca-periph/contracts/interfaces/IMarket.sol"; 

import "tapioca-periph/contracts/interfaces/ISingularity.sol"; 

import "tapioca-periph/contracts/interfaces/IPermitBorrow.sol"; 


import "tapioca-periph/contracts/interfaces/IPermitAll.sol"; 


import "../BaseUSDOStorage.sol"; 


/// @title USDO market module 

/// @notice USDO module for market type actions 

contract USDOMarketModule is BaseUSDOStorage { 
using RebaseLibrary for Rebase; 


using SafeERC20 for IERC20; 


constructor( 
address _|zEndpoint, 
lYieldBoxBase _yieldBox 


) BaseUSDOStorage(_IzEndpoint, _yieldBox) {} 


function removeAsset( 
address from, 
address to, 
uint16 IzDstChainld, 
address zroPaymentAddress, 
bytes calldata adapterParams, 
ICommonData.ICommoneExternalContracts calldata externalData, 
IUSDOBase.IRemoveAndRepay calldata removeAndRepayData, 
ICommonData.!|Approval[] calldata approvals 
) external payable { 
bytes memory IzPayload = abi.encode( 
PT_MARKET_REMOVE_ASSET, 
to, 
externalData, 
removeAndRepayData, 


approvals 


_IzSend( 
IzDstChainld, 


IzPayload, 


payable(from), 
zroPaymentAddress, 
adapterParams, 


msg.value 


emit SendToChain(IzDstChainld, from, LzLib.addressToBytes32(to), 0); 


function sendAndLendOrRepay( 
address from, 
address _ to, 
uint16 IzDstChainld, 
address zroPaymentAddress, 
IUSDOBase.ILendOrRepayParams calldata lendParams, 
ICommonData.lApproval[] calldata approvals, 
ICommonData.IWithdrawParams calldata withdrawParams, 
bytes calldata adapterParams 
) external payable { 
bytes32 toAddress = LzLib.addressToBytes32(_to); 
_debitFrom( 
_from, 
IzEndpoint.getChainld(), 
toAddress, 


lendParams.depositAmount 


bytes memory IzPayload = abi.encode( 
PT YB SEND SGL_LEND_OR_REPAY, 
_from, 
_to, 
lendParams, 
approvals, 


withdrawParams 


_IzSend( 
IzDstChainld, 
IzPayload, 
payable(_from), 
zroPaymentAddress, 
adapterParams, 


msg.value 


emit SendToChain( 
IzDstChainld, 
_from, 
toAddress, 


lendParams.depositAmount 


function remove(bytes memory _payload) public { 


( 


r 


address to, 
ICommonData.ICommonExternalContracts memory externalData, 
IUSDOBase.|RemoveAndRepay memory removeAndRepayData, 
ICommonData.IApproval[] memory approvals 
) = abi.decode( 
_payload, 
( 
uint16, 
address, 
ICommonData.ICommoneExternalContracts, 
IUSDOBase.|RemoveAndRepay, 


ICommonData.IApproval[] 


//approvals 
if (approvals.length > 0) { 


_callApproval(approvals); 


IMagnetar(externalData.magnetar).exitPositionAndRemoveCollateral( 


to, 


externalData, 


removeAndRepayData 


function lend( 
address module, 
uint16 _srcChainld, 
bytes memory _srcAddress, 
uint64 nonce, 
bytes memory _payload 
) public { 


( 


L 


address to, 
IUSDOBase.|LendOrRepayParams memory lendParams, 
ICommonData.IApproval[] memory approvals, 
ICommonData.IWithdrawParams memory withdrawParams 
) = abi.decode( 
_payload, 
( 
uint16, 
address, 
address, 


IUSDOBase.|LendOrRepayParams, 


ICommonData.lApproval[], 


ICommonData.IWithdrawParams 


uint256 balanceBefore = balanceOf(address(this)); 
bool credited = creditedPackets[_srcChainld][_srcAddress][_nonce]; 
if ('credited) { 
_creditTo(_srcChainld, address(this), lendParams.depositAmount); 
creditedPackets[_srcChainld][_srcAddress][_nonce] = true; 
} 


uint256 balanceAfter = balanceOf(address(this)); 


(bool success, bytes memory reason) = module.delegatecall( 
abi.encodeWithSelector( 
this.lendInternal.selector, 
to, 
lendParams, 
approvals, 


withdrawParams 


if ('success) { 
if (balanceAfter - balanceBefore >= lendParams.depositAmount) { 


IERC20(address(this)).safeTransfer( 


to, 


lendParams.depositAmount 


revert(_getRevertMsg(reason)); //forward revert because it's handled by the main 


executor 


} 


emit ReceiveFromChain(_srcChainld, to, lendParams.depositAmount); 


function lendinternal( 
address to, 
IUSDOBase.ILendOrRepayParams memory lendParams, 
ICommonData.IApproval[] memory approvals, 
ICommonData.IWithdrawParams memory withdrawParams 
) public payable { 
if (approvals.length > 0) { 


_callApproval(approvals); 


// Use market helper to deposit and add asset to market 
approve(address(lendParams.marketHelper), lendParams.depositAmount); 
if (lendParams.repay) { 

IMagnetar(lendParams.marketHelper) 


.depositRepayAndRemoveCollateralFromMarket( 


lendParams.market, 
to, 
lendParams.depositAmount, 
lendParams.repayAmount, 
O, 
true, 
withdrawParams 
); 
} else { 
IMagnetar(lendParams.marketHelper).mintFromBBAndLendOnSGL( 
to, 
lendParams.depositAmount, 
IUSDOBase.IMintData({ 
mint: false, 
mintAmount: O, 
collateralDepositData: |[CommonData.IDepositData({ 
deposit: false, 
amount: 0, 
extractFromSender: false 
}) 
}), 
ICommonData.IDepositData({ 
deposit: true, 
amount: lendParams.depositAmount, 
extractFromSender: true 


}), 


lendParams.lockData, 
lendParams.participateData, 
ICommonData.ICommonExternalContracts({ 
magnetar: address(0), 
singularity: lendParams.market, 
bigBang: address(0) 
}) 


function _callApproval(ICommonData.lApproval[] memory approvals) private { 
for (uint256 i = 0; i < approvals.length; ) { 
if (approvals[i].permitBorrow) { 
try 
IPermitBorrow(approvals[i].target).permitBorrow( 
approvals[i].owner, 
approvals[i].spender, 
approvals[i].value, 
approvals[i].deadline, 
approvals[i].v, 
approvals[i].r, 
approvals[i].s 
) 
{} catch Error(string memory reason) { 


if (tapprovals[i].allowFailure) { 


revert(reason); 


} 
} else if (approvals[i].permitAll) { 
try 
IPermitAll(approvals[i].target).permitAll( 
approvals[i].owner, 
approvals[i].spender, 
approvals[i].deadline, 
approvals[i].v, 
approvals[i].r, 
approvals[i].s 
) 
{} catch Error(string memory reason) { 
if (!approvals[i].allowFailure) { 


revert(reason); 


try 
IERC20Permit(approvals[i].target).permit( 
approvals[i].owner, 
approvals[i].spender, 
approvals[i].value, 
approvals[i].deadline, 


approvals[i].v, 


approvals[i].r, 
approvals[i].s 
) 
{} catch Error(string memory reason) { 
if (!approvals[i].allowFailure) { 


revert(reason); 


unchecked { 


++i; 


----- E:/Train/makePDF/v1\tapioca-bar-audit-master\contracts\usd0\modules/USDOOptionsMod 
ule.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


HLZ 


import "tapioca-sdk/dist/contracts/libraries/LZLib.sol"; 


/[TAPIOCA 

import "tapioca-periph/contracts/interfaces/IPermitBorrow.sol"; 

import "tapioca-periph/contracts/interfaces/IPermitAll.sol"; 

import "tapioca-periph/contracts/interfaces/ITapiocaOptionsBroker.sol"; 
import "tapioca-periph/contracts/interfaces/ISendFrom.sol"; 


import "../BaseUSDOStorage.sol"; 


/// @title USDO options module 
/// @notice USDO module for oTap type actions 
contract USDOOptionsModule is BaseUSDOStorage { 


using SafeERC20 for IERC20; 


constructor( 
address _lzEndpoint, 
lYieldBoxBase _yieldBox 


) BaseUSDOStorage(_IzEndpoint, _yieldBox) {} 


function triggerSendFrom( 


uint16 IzDstChainld, 
bytes calldata airdropAdapterParams, 
address zroPaymentAddress, 
uint256 amount, 
ISendFrom.LzCallParams calldata sendFromData, 
ICommonData.!Approval[] calldata approvals 
) external payable { 
bytes memory IzPayload = abi.encode( 
PT SEND FROM, 
msg.sender, 
amount, 
sendFromData, 
IzEndpoint.getChainld(), 


approvals 


_IzSend( 
IzDstChainld, 
IzPayload, 
payable(msg.sender), 
zroPaymentAddress, 
airdropAdapterParams, 


msg.value 


emit SendToChain( 


IzDstChainld, 
msg.sender, 
LzLib.addressToBytes32(msg.sender), 


0 


function exerciseOption( 
ITapiocaOptionsBrokerCrossChain.IExerciseOptionsData 
calldata optionsData, 
ITapiocaOptionsBrokerCrossChain.IExerciseLZData calldata IzData, 
ITapiocaOptionsBrokerCrossChain.lExerciseLZSendTapData 
calldata tapSendData, 
ICommonData.!Approval[] calldata approvals 
) external payable { 


bytes32 toAddress = LzLib.addressToBytes32(optionsData.from); 


_debitFrom( 
optionsData.from, 
IzEndpoint.getChainld(), 
toAddress, 


optionsData.paymentTokenAmount 


bytes memory IzPayload = abi.encode( 


PT_TAP_EXERCISE, 


optionsData, 
tapSendData, 


approvals 


bytes memory adapterParams = LzLib.buildDefaultAdapterParams( 


IzData.extraGas 


_IzSend( 
IzData.IzDstChainld, 
IzPayload, 
payable(optionsData.from), 
IzData.zroPaymentAddress, 
adapterParams, 


msg.value 


emit SendToChain( 
IzData.IzDstChainld, 
optionsData.from, 
toAddress, 


optionsData.paymentTokenAmount 


function sendFromDestination(bytes memory _payload) public { 
( 
address from, 
uint256 amount, 
ISendFrom.LzCallParams memory callParams, 
uint16 IzDstChainld, 
ICommonData.IApproval[] memory approvals 
) = abi.decode( 
_payload, 
( 
uint16, 
address, 
uint256, 
ISendFrom.LzCallParams, 
uint16, 


ICommonData.IApproval[] 


if (approvals.length > 0) { 


_callApproval(approvals); 


ISendFrom(address(this)).sendFrom{value: address(this).balance }( 


from, 


IzDstChainld, 
LzLib.addressToBytes32(from), 
amount, 


callParams 


emit ReceiveFromChain(IzDstChainld, from, 0); 


function exercise( 
address module, 
uint16 _srcChainld, 
bytes memory _srcAddress, 
uint64 nonce, 
bytes memory _payload 
) public { 


( 


r 


ITapiocaOptionsBrokerCrossChain.lExerciseOptionsData 
memory optionsData, 

ITapiocaOptionsBrokerCrossChain.lExerciseLZSendTapData 
memory tapSendData, 

ICommonData.lApproval[] memory approvals 

) = abi.decode( 

_payload, 
( 


uintl6, 
ITapiocaOptionsBrokerCrossChain.IExerciseOptionsData, 
ITapiocaOptionsBrokerCrossChain.|ExerciseLZSendTapData, 


ICommonData.IApproval[] 


uint256 balanceBefore = balanceOf(address(this)); 
bool credited = creditedPackets[_srcChainld][_srcAddress][_nonce]; 
if ('credited) { 
_creditTo( 
_srcChainld, 
address(this), 
optionsData.paymentTokenAmount 
); 
creditedPackets[_srcChainld][_srcAddress][_nonce] = true; 
} 


uint256 balanceAfter = balanceOf(address(this)); 


(bool success, bytes memory reason) = module.delegatecall( 
abi.encodeWithSelector( 
this.exerciselnternal.selector, 
optionsData.from, 
optionsData.oTAPTokenID, 
optionsData.paymentToken, 


optionsData.tapAmount, 


optionsData.target, 
tapSendData, 


approvals 


if ('Isuccess) { 
if ( 
balanceAfter - balanceBefore >= optionsData.paymentTokenAmount 
){ 
IERC20(address(this)).safeTransfer( 
optionsData.from, 


optionsData.paymentTokenAmount 


revert(_getRevertMsg(reason)); //forward revert because it's handled by the main 
executor 


} 


emit ReceiveFromChain( 
_srcChainld, 
optionsData.from, 


optionsData.paymentTokenAmount 


function exerciselnternal( 
address from, 
uint256 oTAPTokenlD, 
address paymentToken, 
uint256 tapAmount, 
address target, 
ITapiocaOptionsBrokerCrossChain.lExerciseLZSendTapData 
memory tapSendData, 
ICommonData.lApproval[] memory approvals 
) public { 
if (approvals.length > 0) { 


_callApproval(approvals); 


ITapiocaOptionsBroker(target).exerciseOption( 
OTAPTokenID, 
paymentToken, 
tapAmount 
); 
if (tapSendData.withdrawOnAnotherChain) { 
ISendFrom(tapSendData.tapOftAddress).sendFrom( 
address(this), 
tapSendData.IzDstChainld, 
LzLib.addressToBytes32(from), 
tapAmount, 


ISendFrom.LzCallParams({ 


refundAddress: payable(from), 
zroPaymentAddress: tapSendData.zroPaymentAddress, 
adapterParams: LzLib.buildDefaultAdapterParams( 


tapSendData.extraGas 


}) 
); 
} else { 


IERC20(tapSendData.tapOftAddress).safeTransfer(from, tapAmount); 


function _callApproval(ICommonData.lApproval[] memory approvals) private { 
for (uint256 i = 0; i < approvals.length; ) { 
if (approvals[i].permitBorrow) { 
try 

IPermitBorrow(approvals[i].target).permitBorrow( 
approvals[i].owner, 
approvals[i].spender, 
approvals[i].value, 
approvals[i].deadline, 
approvals[i].v, 
approvals[i].r, 
approvals[i].s 

) 


{} catch Error(string memory reason) { 


if (tapprovals[i].allowFailure) { 


revert(reason); 


} 
} else if (approvals[i].permitAll) { 
try 
IPermitAll(approvals[i].target).permitAll( 
approvals[i].owner, 
approvals[i].spender, 
approvals[i].deadline, 
approvals[i].v, 
approvals[i].r, 
approvals[i].s 
) 
{} catch Error(string memory reason) { 
if (!approvals[i].allowFailure) { 


revert(reason); 


try 
IERC20Permit(approvals[i].target).permit( 
approvals[i].owner, 
approvals[i].spender, 
approvals[i].value, 


approvals[i].deadline, 


approvals[i].v, 
approvals[i].r, 
approvals[i].s 
) 
{} catch Error(string memory reason) { 
if (!approvals[i].allowFailure) { 


revert(reason); 


unchecked { 


++i; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\interfaces/lAggregatorV3Interf 
ace.sol---- 
// SPDX-License-Identifier: MIT 


pragma solidity *0.8.0; 


interface AggregatorV3Interface { 


function decimals() external view returns (uint8); 


function description() external view returns (string memory); 


function version() external view returns (uint256); 


function getRoundData( 


uint80_ _roundld 


external 

view 

returns ( 
uint80 roundld, 
int256 answer, 
uint256 startedAt, 
uint256 updatedAt, 


uint80 answeredinRound 


function latestRoundData() 


external 


view 


returns ( 


uint80 roundld, 
int256 answer, 
uint256 startedAt, 
uint256 updatedAt, 


uint80 answeredinRound 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\interfaces/IBidder.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


/// @notice Used for performing swap operations when bidding on LiquidationQueue 
interface IBidder { 
/// @notice returns the unique name 


function name() external view returns (string memory); 


/// @notice returns the amount of collateral 
/// @param singularity Market to query for 
/// @param tokenInld Token in YieldBox asset id 
/// @param amountIin Token in amount 
/// @param data extra data used for retrieving the ouput 
function getOutputAmount( 
address singularity, 
uint256 tokenInld, 
uint256 amountin, 
bytes calldata data 


) external view returns (uint256); 


/// @notice swap USDO to collateral 

/// @param singularity Market to swap for 
/// @param tokenInld Token in asset id 

/// @param amountin Token in amount 


/// @param data extra data used for the swap operation 


function swap( 
address singularity, 
uint256 tokenInld, 
uint256 amountin, 
bytes calldata data 


) external returns (uint256); 


/// @notice returns token tokenIn amount based on tokenOut amount 
/// @param singularity Market to query for 
/// @param tokentInld Token in asset id 
/// @param amountOut Token out amount 
/// @param data extra data used for retrieving the ouput 
function getInputAmount( 
address singularity, 
uint256 tokenInld, 
uint256 amountOut, 
bytes calldata data 


) external view returns (uint256); 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\interfaces/IBigBang.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


interface IBigBang { 


struct AccruelInfo { 


uint64 debtRate; 


uint64 lastAccrued; 


function accruelnfo() 


external 


view 


returns (uint64 debtRate, uint64 lastAccrued); 


function minDebtRate() external view returns (uint256); 


function maxDebtRate() external view returns (uint256); 


function debtRateAgainstEthMarket() external view returns (uint256); 


function penrose() external view returns (address); 


function getDebtRate() external view returns (uint256); 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\interfaces/ICommonData.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


interface ICommonData { 
struct |WithdrawParams { 
bool withdraw; 
uint256 withdrawLzFeeAmount; 
bool withdrawOnOtherChain; 
uint16 withdrawLzChainld; 


bytes withdrawAdapterParams; 


struct ISendOptions { 
uint256 extraGasLimit; 


address zroPaymentAddress; 


struct [Approval { 
bool permitAll; 
bool allowFailure; 
address target; 
bool permitBorrow; 
address owner; 
address spender; 


uint256 value; 


uint256 deadline; 
uint8 v; 
bytes32 r; 


bytes32 s; 


struct [CommonExternalContracts { 
address magnetar; 
address singularity; 


address bigBang; 


struct IDepositData { 
bool deposit; 
uint256 amount; 


bool extractFromSender; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\interfaces/IERC3156FlashBorro 
wer.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


interface IERC3156FlashBorrower { 
function onFlashLoan( 
address initiator, 
address token, 
uint256 amount, 
uint256 fee, 
bytes calldata data 


) external returns (bytes32); 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\interfaces/IERC3156FlashLend 
er.Sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


import "./IERC3156FlashBorrower.sol"; 


interface IERC3156FlashLender { 


function maxFlashLoan(address token) external view returns (uint256); 


function flashFee( 
address token, 
uint256 amount 


) external view returns (uint256); 


function flashLoan( 
IERC3156FlashBorrower receiver, 
address token, 
uint256 amount, 
bytes calldata data 


) external returns (bool); 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\interfaces/IGmMxGlpManager.sol 


// SPDX-License-Identifier: MIT 


pragma solidity >=0.8.0; 


interface IGmxGlpManager { 

event AddLiquidity( 
address account, 
address token, 
uint256 amount, 
uint256 aumInUsdg, 
uint256 glpSupply, 
uint256 usdgAmount, 
uint256 mintAmount 

); 

event RemoveLiquidity( 
address account, 
address token, 
uint256 glpAmount, 
uint256 aumInUsdg, 
uint256 glpSupply, 
uint256 usdgAmount, 


uint256 amountOut 


function BASIS POINTS DIVISOR() external view returns (uint256); 


function GLP_PRECISION() external view returns (uint256); 


function MAX_COOLDOWN_DURATION() external view returns (uint256); 


function PRICE _PRECISION() external view returns (uint256); 


function USDG_DECIMALS() external view returns (uint256); 


function addLiquidity( 
address token, 
uint256 amount, 
uint256 minUsdg, 
uint256 _minGlp 


) external returns (uint256); 


function addLiquidityForAccount( 
address _fundingAccount, 
address _account, 
address token, 
uint256 amount, 
uint256_ minUsdg, 
uint256 _minGlp 


) external returns (uint256); 


function aumAddition() external view returns (uint256); 


function aumDeduction() external view returns (uint256); 


function cooldownDuration() external view returns (uint256); 


function getAum(bool maximise) external view returns (uint256); 


function getAumInUsdg(bool maximise) external view returns (uint256); 


function getAums() external view returns (uint256[] memory); 


function getGlobalShortAveragePrice( 


address token 


) external view returns (uint256); 


function getGlobalShortDelta( 


address token, 


uint256 _price, 


uint256 size 


) external view returns (uint256, bool); 


function getPrice(bool maximise) external view returns (uint256); 


function glp() external view returns (address); 


function gov() external view returns (address); 


function inPrivateMode() external view returns (bool); 


function isHandler(address) external view returns (bool); 


function lastAddedAt(address) external view returns (uint256); 


function removeLiquidity( 
address _tokenOut, 
uint256 glpAmount, 
uint256 _minOut, 
address receiver 


) external returns (uint256); 


function removeLiquidityForAccount( 
address _account, 
address _tokenOut, 
uint256 _glpAmount, 
uint256 _minOut, 
address receiver 


) external returns (uint256); 


function setAumAdjustment( 
uint256 aumAddition, 


uint256 _aumDeduction 


) external; 


function setCooldownDuration(uint256 cooldownDuration) external; 


function setGov(address _gov) external; 


function setHandler(address handler, bool _isActive) external; 


function setInPrivateMode(bool _inPrivateMode) external; 


function setShortsTracker(address _shortsTracker) external; 


function setShortsTrackerAveragePriceWeight( 


uint256 _shortsTrackerAveragePriceWeight 


) external; 


function shortsTracker() external view returns (address); 


function shortsTrackerAveragePriceWeight() external view returns (uint256); 


function usdg() external view returns (address); 


function vault() external view returns (address); 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\interfaces/ILiquidationQueue.s 
ol---- 
// SPDX-License-ldentifier: UNLICENSED 


pragma solidity *0.8.18; 


import "./IBidder.sol"; 


interface ILiquidationQueue { 
enum MODE { 


ADD, 


struct Poollnfo { 
uint256 totalAmount; //liquidated asset amount 
mapping(address => Bidder) users; 
} 
struct Bidder { 
bool isUsdo; 
bool swapOnExecute; 
uint256 usdoAmount; 
uint256 liquidatedAssetAmount; 


uint256 timestamp; // Timestamp in second of the last bid. 


struct OrderBookPoolEntry { 


address bidder; 


Bidder bidInfo; 


struct OrderBookPoollnfo { 
uint32 poolld; 
uint32 nextBidPull; // Next position in “entries to start pulling bids from 


uint32 nextBidPush; // Next position in `entries`ò to start pushing bids to 


struct LiquidationQueueMeta { 
uint256 activationTime; // Time needed before a bid can be activated for execution 
uint256 minBidAmount; // Minimum bid amount 
address feeCollector; // Address of the fee collector 
IBidder bidExecutionSwapper; //Allows swapping USDO to collateral when a bid is 
executed 


IBidder usdoSwapper; //Allows swapping any other stablecoin to USDO 


struct BidExecutionData { 
uint256 curPoolld; 
bool isBidAvail; 
OrderBookPoollnfo poollnfo; 
OrderBookPoolEntry orderBookEntry; 
OrderBookPoolEntry orderBookEntryCopy; 


uint256 totalPoolAmountExecuted; 


uint256 totalPoolCollateralLiquidated; 
uint256 totalUsdoAmountUsed; 
uint256 exchangeRate; 


uint256 discountedBidderAmount; 


[| *** EVENTS *** // 
/// @notice event emitted when a bid is placed 
event Bid( 

address indexed caller, 

address indexed bidder, 

uint256 indexed pool, 

uint256 usdoAmount, 

uint256 liquidatedAssetAmount, 

uint256 timestamp 
); 
/// @notice event emitted when a bid is activated 
event ActivateBid( 

address indexed caller, 

address indexed bidder, 

uint256 indexed pool, 

uint256 usdoAmount, 

uint256 liquidatedAssetAmount, 


uint256 collateralValue, 


uint256 timestamp 
); 
/// @notice event emitted a bid is removed 
event RemoveBid( 

address indexed caller, 

address indexed bidder, 

uint256 indexed pool, 

uint256 usdoAmount, 

uint256 liquidatedAssetAmount, 

uint256 collateralValue, 

uint256 timestamp 
); 
/// @notice event emitted when bids are executed 
event ExecuteBids( 

address indexed caller, 

uint256 indexed pool, 

uint256 usdoAmountExecuted, 

uint256 liquidatedAssetAmountExecuted, 

uint256 collateralLiquidated, 

uint256 timestamp 
); 
/// @notice event emitted when funds are redeemed 
event Redeem(address indexed redeemer, address indexed to, uint256 amount); 
/// @notice event emitted when bid swapper is updated 
event BidSwapperUpdated(IBidder indexed old, address indexed _new); 


/// @notice event emitted when usdo swapper is updated 


event UsdoSwapperUpdated(IBidder indexed _old, address indexed _new); 


function IqAssetlid() external view returns (uint256); 


function marketAssetld() external view returns (uint256); 


function liquidatedAssetld() external view returns (uint256); 


function init(LiquidationQueueMeta calldata, address singularity) external; 


function market() external view returns (string memory); 


function getOrderBookSize( 


uint256 pool 


) external view returns (uint256 size); 


function getOrderBookPoolEntries( 


uint256 pool 


) external view returns (OrderBookPoolEntry[] memory x); 


function getBidPoolUserInfo( 


uint256 pool, 


address user 


) external view returns (Bidder memory); 


function userBidIndexLength( 


address user, 
uint256 pool 


) external view returns (uint256 len); 


function onlyOnce() external view returns (bool); 


function setBidExecutionSwapper(address swapper) external; 


function setUsdoSwapper(address swapper) external; 


function getNextAvailBidPool() 
external 
view 


returns (uint256 i, bool available, uint256 totalAmount); 


function bidWithStable( 
address user, 
uint256 pool, 
uint256 stableAssetld, 
uint256 amountin, 
bytes calldata data 


) external; 


function bid(address user, uint256 pool, uint256 amount) external; 


function activateBid(address user, uint256 pool) external; 


function removeBid( 
address user, 
uint256 pool 


) external returns (uint256 amountRemoved); 


function redeem(address to) external; 


function executeBids( 
uint256 collateralAmountToLiquidate, 
bytes calldata swapData 


) external returns (uint256 amountExecuted, uint256 collateralLiquidated); 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\interfaces/IMagnetar.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


import "./I[TapiocaOptionsBroker.sol"; 
import "./I[TapiocaOptionLiquidityProvision.sol"; 
import "./I\CommonData.sol"; 


import {IUSDOBase} from "./IUSDO.sol"; 


interface IMagnetar { 
function getAmountForBorrowPart( 
address market, 
uint256 borrowPart 


) external view returns (uint256 amount); 


function getBorrowPartForAmount( 
address market, 
uint256 amount 


) external view returns (uint256 part); 


function withdrawToChain( 
address yieldBox, 
address from, 
uint256 assetld, 
uint16 dstChainld, 


bytes32 receiver, 


uint256 amount, 

uint256 share, 

bytes memory adapterParams, 
address payable refundAddress, 
uint256 gas 


) external payable; 


function mintFromBBAndLendOnSGL( 
address user, 
uint256 lendAmount, 
IUSDOBase.IMintData calldata mintData, 
ICommonData.!IDepositData calldata depositData, 
ITapiocaOptionLiquidityProvision.l|OptionsLockData calldata lockData, 
ITapiocaOptionsBroker.|OptionsParticipateData calldata participateData, 
ICommonData.ICommoneExternalContracts calldata externalContracts 


) external payable; 


function depositRepayAndRemoveCollateralFromMarket( 
address market, 
address user, 
uint256 depositAmount, 
uint256 repayAmount, 
uint256 collateralAmount, 
bool extractFromSender, 
ICommonData.IWithdrawParams calldata withdrawCollateralParams 


) external payable; 


function exitPositionAndRemoveCollateral( 
address user, 
ICommonData.ICommoneExternalContracts calldata externalData, 
IUSDOBase.IRemoveAndRepay calldata removeAndRepayData 


) external payable; 


function depositAddCollateralAndBorrowFromMarket( 
address market, 
address user, 
uint256 collateralAmount, 
uint256 borrowAmount, 
bool extractFromSender, 
bool deposit, 
ICommonData.IWithdrawParams memory withdrawParams 


) external payable; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\interfaces/IMarket.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


interface IMarket { 


function asset() external view returns (address); 


function assetlid() external view returns (uint256); 


function collateral() external view returns (address); 


function collateralld() external view returns (uint256); 


function totalBorrowCap() external view returns (uint256); 


function totalCollateralShare() external view returns (uint256); 


function userBorrowPart(address) external view returns (uint256); 


function userCollateralShare(address) external view returns (uint256); 


function totalBorrow() 


external 


view 


returns (uint128 elastic, uintl28 base); 


function oracle() external view returns (address); 


function oracleData() external view returns (bytes memory); 


function exchangeRate() external view returns (uint256); 


function yieldBox() external view returns (address payable); 


function liquidationMultiplier() external view returns (uint256); 


function addCollateral( 
address from, 
address to, 
bool skim, 
uint256 amount, 
uint256 share 


) external; 


function removeCollateral(address from, address to, uint256 share) external; 


function addAsset( 
address from, 
address to, 
bool skim, 
uint256 share 


) external returns (uint256 fraction); 


function repay( 
address from, 
address to, 
bool skim, 
uint256 part 


) external returns (uint256 amount); 


function borrow( 
address from, 
address to, 
uint256 amount 


) external returns (uint256 part, uint256 share); 


function execute( 
bytes[] calldata calls, 
bool revertOnFail 


) external returns (bool[] memory successes, string[] memory results); 


function refreshPenroseFees( 


address feeTo 


) external returns (uint256 feeShares); 


function penrose() external view returns (address); 


function owner() external view returns (address); 


function buyCollateral( 
address from, 
uint256 borrowAmount, 
uint256 supplyAmount, 
uint256 minAmountOut, 
address swapper, 
bytes calldata dexData 


) external returns (uint256 amountOut); 


function sellCollateral( 
address from, 
uint256 share, 
uint256 minAmountOut, 
address swapper, 
bytes calldata dexData 


) external returns (uint256 amountOut); 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\interfaces/INative.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


interface INative { 


function deposit() external payable; 


function withdraw(uint256 wad) external; 


function balanceOf(address account) external view returns (uint256); 


function name() external view returns (string memory); 


function symbol() external view returns (string memory); 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\interfaces/lOracle.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


interface lOracle { 
// @notice Precision of the return value. 


function decimals() external view returns (uint8); 


/// @notice Get the latest exchange rate. 
/// @param data Usually abi encoded, implementation specific data that contains 
information and arguments to & about the oracle. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return success if no valid (recent) rate is available, return false else true. 
/// @return rate The rate of the requested asset / pair / pool. 
function get( 
bytes calldata data 


) external returns (bool success, uint256 rate); 


/// @notice Check the last exchange rate without any state changes. 
/// @param data Usually abi encoded, implementation specific data that contains 
information and arguments to & about the oracle. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 


abi.decode(data, (string, string, uint256)); 


/// @return success if no valid (recent) rate is available, return false else true. 
/// @return rate The rate of the requested asset / pair / pool. 
function peek( 

bytes calldata data 


) external view returns (bool success, uint256 rate); 


/// @notice Check the current spot exchange rate without any state changes. For oracles 
like TWAP this will be different from peek(). 
/// @param data Usually abi encoded, implementation specific data that contains 
information and arguments to & about the oracle. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return rate The rate of the requested asset / pair / pool. 


function peekSpot(bytes calldata data) external view returns (uint256 rate); 


/// @notice Returns a human readable (short) name about this oracle. 
/// @param data Usually abi encoded, implementation specific data that contains 
information and arguments to & about the oracle. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return (string) A human readable symbol name about this oracle. 


function symbol(bytes calldata data) external view returns (string memory); 


/// @notice Returns a human readable name about this oracle. 


/// @param data Usually abi encoded, implementation specific data that contains 
information and arguments to & about the oracle. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return (string) A human readable name about this oracle. 


function name(bytes calldata data) external view returns (string memory); 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\interfaces/IOwnable.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity ^0.8.18; 


interface IlOwnable { 


function owner() external view returns (address); 


function renounceOwnership() external; 


function transferOwnership(address newOwner) external; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\interfaces/IPenrose.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


import "./ISwapper.sol"; 


interface IPenrose { 
/// @notice swap extra data 
struct SwapData { 


uint256 minAssetAmount; 


/// @notice Used to define the MasterContract's type 
enum ContractType { 

lowRisk, 

mediumRisk, 


highRisk 


/// @notice MasterContract address and type 
struct MasterContract { 
address location; 


ContractType risk; 


function bigBangEthMarket() external view returns (address); 


function bigBangEthDebtRate() external view returns (uint256); 


function swappers(ISwapper swapper) external view returns (bool); 


function yieldBox() external view returns (address payable); 


function tapToken() external view returns (address); 


function tapAssetid() external view returns (uint256); 


function usdoToken() external view returns (address); 


function usdoAssetld() external view returns (uint256); 


function feeTo() external view returns (address); 


function wethToken() external view returns (address); 


function wethAssetld() external view returns (uint256); 


function isMarketRegistered(address market) external view returns (bool); 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\interfaces/IPermit.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


interface IPermit { 
function permit( 

address owner, 
address spender, 
uint256 value, 
uint256 deadline, 
uint8 v, 
bytes32 r, 
bytes32 s 


) external; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\interfaces/IPermitAll.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


interface IPermitAll { 
function permitAll( 

address owner, 
address spender, 
uint256 deadline, 
uint8 v, 
bytes32 r, 
bytes32 s 


) external; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\interfaces/IPermitBorrow.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


interface IPermitBorrow { 
function permitBorrow( 

address owner, 
address spender, 
uint256 value, 
uint256 deadline, 
uint8 v, 
bytes32 r, 
bytes32 s 


) external; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\interfaces/ISendFrom.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


interface ISendFrom { 
struct LzCallParams { 
address payable refundAddress; 
address zroPaymentAddress; 


bytes adapterParams; 


function sendFrom( 
address from, 
uintl6 _dstChainld, 
bytes32 toAddress, 
uint256 amount, 
LzCallParams calldata_callParams 


) external payable; 


function useCustomAdapterParams() external view returns (bool); 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\interfaces/ISingularity.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


import "./IMarket.sol"; 


import {IUSDOBase} from "./IUSDO.sol"; 


interface ISingularity is [Market { 
struct AccruelInfo { 
uint64 interestPerSecond; 
uint64 lastAccrued; 


uint128 feesEarnedFraction; 


function accruelnfo() 
external 
view 
returns ( 
uint64 interestPerSecond, 
uint64 lastBlockAccrued, 


uint128 feesEarnedFraction 


function totalAsset() external view returns (uint128 elastic, uintl28 base); 


function removeAsset( 


address from, 
address to, 
uint256 fraction 


) external returns (uint256 share); 


function name() external view returns (string memory); 


function nonces(address) external view returns (uint256); 


function permit( 
address owner_, 
address spender, 
uint256 value, 
uint256 deadline, 
uint8 v, 
bytes32 r, 
bytes32 s 


) external; 


function allowance(address, address) external view returns (uint256); 


function approve(address spender, uint256 amount) external returns (bool); 


function balanceOf(address) external view returns (uint256); 


function liquidationQueue() external view returns (address payable); 


function computeAllowedLendShare( 
uint256 amount, 
uint256 tokenld 


) external view returns (uint256 share); 


function getinterestDetails() 
external 
view 


returns (Accruelnfo memory _accruelnfo, uint256 utilization); 


function multiHopBuyCollateral( 
address from, 
uint256 collateralAmount, 
uint256 borrowAmount, 
IUSDOBase.ILeverageSwapData calldata swapData, 
IUSDOBase.ILeverageLZData calldata IzData, 
IUSDOBase.|LeverageExternalContractsData calldata externalData 


) external payable; 


function multiHopSellCollateral( 
address from, 
uint256 share, 
IUSDOBase.|ILeverageSwapData calldata swapData, 
IUSDOBase.ILeverageLZData calldata IzData, 


IUSDOBase.|LeverageExternalContractsData calldata externalData 


) external payable; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\interfaces/IStargateRouter.sol-- 


// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


interface IStargateRouterBase { 
//for Router 
struct IzTxObj { 
uint256 dstGasForCall; 
uint256 dstNativeAmount; 


bytes dstNativeAddr; 


function swap( 
uintl6 _dstChainld, 
uint256 srcPoolld, 
uint256 dstPoolld, 
address payable _refundAddress, 
uint256 _amountLD, 
uint256 minAmountLD, 
IZTxObj memory |zTxParams, 
bytes calldata to, 
bytes calldata payload 


) external payable; 


interface IStargateRouter is IStargateRouterBase { 

//for RouterETH 

function swapETH( 
uintl6 _dstChainld, // destination Stargate chainld 
address payable refundAddress, // refund additional messageFee to this address 
bytes calldata toAddress, // the receiver of the destination ETH 
uint256 amountLD, // the amount, in Local Decimals, to be swapped 
uint256 minAmountLD // the minimum amount accepted out on destination 


) external payable; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\interfaces/ISwapper.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


interface ISwapper { 
struct SwapTokensData { 
address tokenIn; 
uint256 tokenInld; 
address tokenOut; 


uint256 tokenOutld; 


struct SwapAmountData { 
uint256 amountin; 
uint256 shareln; 
uint256 amountOut; 


uint256 shareOut; 


struct YieldBoxData { 
bool withdrawFromyYb; 


bool depositToYb; 


struct SwapData { 


SwapTokensData tokensData; 


SwapAmountData amountData; 


YieldBoxData yieldBoxData; 


//Add more overloads if needed 
function buildSwapData( 

address tokenIn, 

address tokenOut, 

uint256 amountin, 

uint256 shareln, 

bool withdrawFromYb, 

bool depositToYb 


) external view returns (SwapData memory); 


function buildSwapData( 
uint256 tokenInld, 
uint256 tokenOutld, 
uint256 amountin, 
uint256 shareln, 
bool withdrawFromYb, 
bool depositToYb 


) external view returns (SwapData memory); 


function getDefaultDexOptions() external view returns (bytes memory); 


function getOutputAmount( 


SwapData calldata swapData, 
bytes calldata dexOptions 


) external view returns (uint256 amountOut); 


function getInputAmount( 
SwapData calldata swapData, 
bytes calldata dexOptions 


) external view returns (uint256 amountin); 


function swap( 
SwapData calldata swapData, 
uint256 amountOutMin, 
address to, 
bytes calldata dexOptions 


) external returns (uint256 amountOut, uint256 shareOut); 


interface ICurveSwapper is ISwapper { 


function curvePool() external view returns (address); 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\interfaces/ITapiocaOFT.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 
import "./ISendFrom.sol"; 
import {IUSDOBase} from "./IUSDO.sol"; 


import "./I\CommonData.sol"; 


interface ITapiocaOFTBase { 


function hostChainID() external view returns (uint256); 


function wrap( 


address fromAddress, 


address toAddress, 


uint256 amount 


) external; 


function wrapNative(address toAddress) external payable; 


function unwrap(address toAddress, uint256 amount) external; 


function erc20() external view returns (address); 


function IzEndpoint() external view returns (address); 


/// @dev used for generic TOFTs 
interface ITapiocaOFT is IsendFrom, ITapiocaOFTBase { 
struct IRemoveParams { 
uint256 share; 
address marketHelper; 


address market; 


struct IBorrowParams { 


uint256 amount; 


uint256 borrowAmount; 


address marketHelper; 


address market; 


function totalFees() external view returns (uint256); 


function erc20() external view returns (address); 


function wrappedAmount(uint256 amount) external view returns (uint256); 


function isHostChain() external view returns (bool); 


function balanceOf(address holder) external view returns (uint256); 


function isTrustedRemote( 


uint16 IzChainld, 
bytes calldata path 


) external view returns (bool); 


function approve(address spender, uint256 amount) external returns (bool); 


function extractUnderlying(uint256 amount) external; 


function harvestFees() external; 


/// OFT specific methods 

function sendToYBAndBorrow( 
address from, 
address to, 
uint16 IzDstChainld, 
bytes calldata airdropAdapterParams, 
IBorrowParams calldata borrowParams, 
ICommonData.IWithdrawParams calldata withdrawParams, 
ICommonData.ISendOptions calldata options, 
ICommonData.!Approval[] calldata approvals 


) external payable; 


function sendToStrategy( 
address from, 
address to, 


uint256 amount, 


uint256 share, 

uint256 assetld, 

uint16 IzDstChainld, 
ICommonData.ISendOptions calldata options 


) external payable; 


function retrieveFromStrategy( 
address from, 
uint256 amount, 
uint256 share, 
uint256 assetld, 
uint16 IzDstChainld, 
address zroPaymentAddress, 
bytes memory airdropAdapterParam 


) external payable; 


function sendForLeverage( 
uint256 amount, 
address leverageFor, 
IUSDOBase.|LeverageLZData calldata IzData, 
IUSDOBase.ILeverageSwapData calldata swapData, 
IUSDOBase.!ILeverageExternalContractsData calldata externalData 


) external payable; 


function removeCollateral( 


address from, 


address to, 

uint16 IzDstChainld, 

address zroPaymentAddress, 
ICommonData.IWithdrawParams calldata withdrawParams, 
ITapiocaOFT.IRemoveParams calldata removeParams, 
ICommonData.lApproval[] calldata approvals, 

bytes calldata adapterParams 


) external payable; 


function initMultiSell( 
address from, 
uint256 share, 
IUSDOBase.ILeverageSwapData calldata swapData, 
IUSDOBase.ILeverageLZData calldata IzData, 
IUSDOBase.ILeverageExternalContractsData calldata externalData, 
bytes calldata airdropAdapterParams, 
ICommonData.!|Approval[] calldata approvals 


) external payable; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\interfaces/ITapiocaOptionLiqui 
dityProvision.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


interface ITapiocaOptionLiquidityProvision { 
struct lOptionsLockData { 
bool lock; 
address target; 
uint128 lockDuration; 
uint128 amount; 


uint256 fraction; 


struct lOptionsUnlockData { 
bool unlock; 
address target; 


uint256 tokenld; 


function yieldBox() external view returns (address); 


function activeSingularities( 


address singularity 


external 


view 

returns ( 
uint256 sglAssetld, 
uint256 totalDeposited, 


uint256 poolWeight 


function lock( 
address to, 
address singularity, 
uint128 lockDuration, 
uint128 amount 


) external returns (uint256 tokenld); 


function unlock( 
uint256 tokenld, 
address singularity, 
address to 


) external returns (uint256 sharesOut); 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\interfaces/ITapiocaOptions.sol- 
// SPDX-License-ldentifier: UNLICENSED 


pragma solidity *0.8.18; 


interface ITapiocaOptions { 
struct TapOption { 
uintl28 expiry; // timestamp, as once one wise man said, the sun will go dark before 
this overflows 
uint128 discount; // discount in basis points 


uint256 tOLP; // tOLP token ID 


function attributes( 
uint256 _tokenld 


) external view returns (address, TapOption memory); 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\interfaces/ITapiocaOptionsBrok 
er.Sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


import {ICommonOFT} from "tapioca-sdk/dist/contracts/token/oft/v2/IComMmonOFT.sol"; 


import "./I\CommonData.sol"; 


interface ITapiocaOptionsBrokerCrossChain { 

struct IExerciseOptionsData { 
address from; 
address target; 
uint256 paymentTokenAmount; 
uint256 oTAPTokenID; 
address paymentToken; 
uint256 tapAmount; 

} 

struct IExerciseLZData { 
uint16 IzDstChainld; 
address zroPaymentAddress; 
uint256 extraGas; 

} 

struct IExerciseLZSendTapData { 
bool withdrawOnAnotherChain; 
address tapOftAddress; 


uint16 IzDstChainld; 


uint256 amount; 
address zroPaymentAddress; 


uint256 extraGas; 


function exerciseOption( 
lExerciseOptionsData calldata optionsData, 
lExerciseLZData calldata IzData, 
lExerciseLZSendTapData calldata tapSendData, 
ICommonData.!Approval[] calldata approvals 


) external payable; 


interface ITapiocaOptionsBroker { 
struct lOptionsParticipateData { 
bool participate; 
address target; 


uint256 tOLPTokenld; 


struct lOptionsExitData { 
bool exit; 
address target; 


uint256 oTAPTokenlD; 


function oTAP() external view returns (address); 


function exerciseOption( 
uint256 oTAPTokenlD, 
address paymentToken, 
uint256 tapAmount 


) external; 


function participate( 


uint256 tOLPTokenID 


) external returns (uint256 oTAPTokenID); 


function exitPosition(uint256 oTAPTokenID) external; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\interfaces/ITapiocaWrapper.sol 


// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


interface ITapiocaWrapper { 


function mngmtFee() external view returns (uint256); 


function mngmtFeeFraction() external view returns (uint256); 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\interfaces/ITapOFT.sol---- 


// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


/// @dev interface for TAP token 


interface ITapOFT { 


function extractTAP(address to, uint256 value) external; 


function approve(address to, uint256 value) external; 


function balanceOf(address user) external view returns (uint256); 


function emissionsStartTime() external view returns (uint256); 


function mintedInWeek(int256 week) external view returns (uint256); 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\interfaces/IUSDO.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


import "@openzeppelin/contracts/token/ERC20/extensions/IERC20Metadata.sol"; 


import "./IMarket.sol"; 

import "./ISingularity.sol"; 

import "./ITapiocaOptionsBroker.sol"; 

import "./I[TapiocaOptionLiquidityProvision.sol"; 


import "./I\CommonData.sol"; 


interface IUSDOBase { 
// remove and repay 
struct ILeverageExternalContractsData { 
address swapper; 
address magnetar; 
address tOft; 


address srcMarket; 


struct IRemoveAndRepay { 
bool removeAssetFromSGL; 
uint256 removeShare; //slightly greater than repayAmount to cover the interest 
bool repayAssetOnBB; 


uint256 repayAmount; // on BB 


bool removeCollateralFromBB; 

uint256 collateralShare; // from BB 
ITapiocaOptionsBroker.l|OptionsExitData exitData; 
ITapiocaOptionLiquidityProvision.l|OptionsUnlockData unlockData; 
ICommonData.IWithdrawParams assetWithdrawData; 


ICommonData.IWithdrawParams collateralWithdrawData; 


// lend or repay 
struct ILendOrRepayParams { 
bool repay; 
uint256 depositAmount; 
uint256 repayAmount; 
address marketHelper; 
address market; 
bool removeCollateral; 
uint256 removeCollateralShare; 
ITapiocaOptionLiquidityProvision.lOptionsLockData lockData; 


ITapiocaOptionsBroker.|OptionsParticipateData participateData; 


//leverage data 

struct ILeverageLZData { 
uint256 srcExtraGasLimit; 
uint16 IzSrcChainld; 


uint16 IzDstChainld; 


address zroPaymentAddress; 
bytes dstAirdropAdapterParam; 
bytes srcAirdropAdapterParam; 


address refundAddress; 


struct ILeverageSwapData { 
address tokenOut; 
uint256 amountOutMin; 


bytes data; 


struct IMintData { 
bool mint; 
uint256 mintAmount; 


ICommonData.!IDepositData collateralDepositData; 


function mint(address _to, uint256 amount) external; 


function burn(address from, uint256 amount) external; 


function sendAndLendOrRepay( 


address from, 


address to, 


uint16 IzDstChainld, 


address zroPaymentAddress, 

ILendOrRepayParams calldata lendParams, 

ICommonData.lApproval[] calldata approvals, 

ICommonData.IWithdrawParams calldata withdrawParams, //collateral remove data 
bytes calldata adapterParams 


) external payable; 


function sendForLeverage( 
uint256 amount, 
address leverageFor, 
ILeverageLZData calldata |zData, 
ILeverageSwapData calldata swapData, 
lILeverageExternalContractsData calldata externalData 


) external payable; 


function initMultiHopBuy( 
address from, 
uint256 collateralAmount, 
uint256 borrowAmount, 
IUSDOBase.ILeverageSwapData calldata swapData, 
IUSDOBase.ILeverageLZData calldata IzData, 
IUSDOBase.|LeverageExternalContractsData calldata externalData, 
bytes calldata airdropAdapterParams, 
ICommonData.lApproval[] memory approvals 


) external payable; 


function removeAsset( 
address from, 
address to, 
uint16 IzDstChainld, 
address zroPaymentAddress, 
bytes calldata adapterParams, 
ICommonData.ICommoneExternalContracts calldata externalData, 
IUSDOBase.IRemoveAndRepay calldata removeAndRepayData, 
ICommonData.!Approval[] calldata approvals 


) external payable; 


interface IUSDO is |IUSDOBase, IERC20Metadata { } 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\interfaces/lYieldBoxBase.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


import "tapioca-sdk/dist/contracts/YieldBox/contracts/enums/YieldBoxTokenType.sol"; 


interface lYieldBoxBase { 
function depositAsset( 
uint256 assetld, 
address from, 
address to, 
uint256 amount, 
uint256 share 


) external returns (uint256 amountOut, uint256 shareOut); 


function withdraw( 
uint256 assetld, 
address from, 
address to, 
uint256 amount, 
uint256 share 


) external returns (uint256 amountOut, uint256 shareOut); 


function transfer( 
address from, 


address to, 


uint256 assetld, 
uint256 share 


) external; 


function isApprovedForAll( 
address user, 
address spender 


) external view returns (bool); 


function setApprovalForAll(address spender, bool status) external; 


function assets( 


uint256 assetlid 


external 

view 

returns ( 
TokenType tokenType, 
address contractAddress, 
address strategy, 


uint256 tokenld 


function assetTotals( 
uint256 assetlid 


) external view returns (uint256 totalShare, uint256 totalAmount); 


function toShare( 
uint256 assetld, 
uint256 amount, 
bool roundUp 


) external view returns (uint256 share); 


function toAmount( 
uint256 assetld, 
uint256 share, 
bool roundUp 


) external view returns (uint256 amount); 


function balanceOf( 
address user, 
uint256 assetlid 


) external view returns (uint256 share); 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\LiquidationQueue/LiquidationQ 
ueue.sol---- 

// SPDX-License-lIdentifier: UNLICENSED 

pragma solidity *0.8.18; 

import "@boringcrypto/boring-solidity/contracts/BoringOwnable.sol"; 


import "@boringcrypto/boring-solidity/contracts/interfaces/IERC20.sol"; 


import "../interfaces/IPenrose.sol"; 

import "../interfaces/ISingularity.sol"; 

import "../interfaces/ILiquidationQueue.sol"; 

import "tapioca-sdk/dist/contracts/YieldBox/contracts/interfaces/IStrategy.sol"; 


import "tapioca-sdk/dist/contracts/YieldBox/contracts/strategies/ERC20WithoutStrategy.sol"; 


import "tapioca-sdk/dist/contracts/YieldBox/contracts/YieldBox.sol"; 


/// @title LiquidationQueue 
/// @author @OxRektora, TapiocaDAO 
/// @notice Liquidation bidders market 
/// @dev used in Singularity 
///_ _- bidders can active and execute bids 
IIl. - bidders can either bid with the market's asset or stablecoins 
contract LiquidationQueue is ILiquidationQueue { 
J [ RRRR ROOK // 
If *** VARS ¥** // 
J [ RPRRR RIO // 


[** 


* General information about the LiquidationQueue contract. 
*/ 

/// @notice returns metadata information 
LiquidationQueueMeta public liquidationQueueMeta; 

/// @notice targeted market 

ISingularity public singularity; 

/// @notice Penrose addres 

IPenrose public penrose; 

/// @notice YieldBox address 


YieldBox public yieldBox; 


/// @notice liquidation queue Penrose asset id 
uint256 public IqAssetld; 

/// @notice singularity asset id 

uint256 public marketAssetld; 

/// @notice asset that is being liquidated 


uint256 public liquidatedAssetld; 


/// @notice initialization status 


bool public onlyOnce; 


[** 
* Pools & order books information. 


*/ 


/// @notice Bid pools 


/// @dev x% premium => bid pool 

IIL 0... 30 range 

[I| poolld => totalAmount 

///_ poolld => userAddress => userBidInfo. 


mapping(uint256 => Poollnfo) public bidPools; 


/// @notice The actual order book. Entries are stored only once a bid has been activated 
/// @dev poolld => bidIndex => bidEntry). 
mapping(uint256 => mapping(uint256 => OrderBookPoolEntry)) 
public orderBookEntries; 
/// @notice Meta-data about the order book pool 
/// @dev poolld => poollnfo. 


mapping(uint256 => OrderBookPoollnfo) public orderBooklInfos; 


* Ledger. 


/// @notice User current bids 
/// @dev user => orderBookEntries[poolld][bidIndex] 


mapping(address => mapping(uint256 => uint256[])) public userBidIndexes; 


/// @notice Due balance of users 
/// @dev user => amountDue. 


mapping(address => uint256) public balancesDue; 


// *** CONSTANTS *** // 
uint256 constant MAX_BID_POOLS = 10; // Maximum amount of pools. 
// “amount” * ((‘bidPool’ * ~PREMIUM FACTOR’) / “PREMIUM FACTOR PRECISION’) = 
premium. 
uint256 constant PREMIUM_FACTOR = 100; // Premium factor. 
uint256 constant PREMIUM FACTOR PRECISION = 10 000; // Precision of the premium 


factor. 


uint256 private constant EXCHANGE_RATE_PRECISION = 1e18; 


uint256 private constant WITHDRAWAL FEE = 50; // 0.5% 


uint256 private constant WITHDRAWAL_FEE_ PRECISION = 10 000; 


// *** MODIFIERS *** // 
modifier Active() { 


require(onlyOnce, "LQ: Not initialized"); 


/// @notice Acts as a ‘constructor’, should be called by a Singularity market. 
/// @param _liquidationQueueMeta Info about the liquidations. 


/// @param _singularity The Singularity market address 


function init( 
LiquidationQueueMeta calldata _liquidationQueueMeta, 
address _singularity 

) external override { 


require(!onlyOnce, "LQ: Initialized"); 


liquidationQueueMeta = _liquidationQueueMeta; 


singularity = ISingularity(_ singularity); 
liquidatedAssetld = singularity.collateralld(); 
marketAssetld = singularity.assetld(); 
penrose = |Penrose(singularity.penrose()); 


yieldBox = YieldBox(singularity.yieldBox()); 


IqAssetld = marketAssetld; 


IERC20(singularity.asset()).approve( 
address(yieldBox), 
type(uint256).max 

); 


yieldBox.setApprovalForAll(address(singularity), true); 


// We initialize the pools to save gas on conditionals later on. 
for (uint256 i = 0; i <= MAX_BID_POOLS; ) { 
_initOrderBookPoollnfo(i); 


++i; 


onlyOnce = true; // We set the init flag. 


// *** VIEW FUNCTIONS *** // 

/// @notice returns targeted market 

/// @return market name 

function market() public view returns (string memory) { 


return singularity.name(); 


/// @notice returns order book size 

/// @param pool the pool id 

/// @return size order book size 

function getOrderBookSize(uint256 pool) public view returns (uint256 size) { 
OrderBookPoollnfo memory poollnfo = orderBooklInfos[pool]; 
unchecked { 


size = poollnfo.nextBidPush - poollnfo.nextBidPull; 


/// @notice returns an array of 'OrderBookPoolEntry' for a pool 


/// @param pool the pool id 


/// return x order book pool entries details 

function getOrderBookPoolEntries( 
uint256 pool 

) external view returns (OrderBookPoolEntry[] memory x) { 
OrderBookPoollnfo memory poollnfo = orderBooklInfos[pool]; 


uint256 orderBookSize = poollnfo.nextBidPush - poollnfo.nextBidPull; 


x = new OrderBookPoolEntry[](orderBookSize); // Initialize the return array. 


mapping(uint256 => OrderBookPoolEntry) 


storage entries = orderBookEntries[pool]; 


for ( 


(uint256 i, uint256 j) = (poollnfo.nextBidPull, 0); 


i < poollnfo.nextBidPush; 


){ 


x[j] = entries[i]; // Copy the entry to the return array. 


unchecked { 


/// @notice Get the next not empty bid pool in ASC order. 


/// @return i The bid pool id. 
/// @return available True if there is at least 1 bid available across all the order books. 
/// @return totalAmount Total available liquidated asset amount. 
function getNextAvailBidPool() 
public 
view 
override 


returns (uint256 i, bool available, uint256 totalAmount) 


for (; i <= MAX_BID_ POOLS; ) { 
if (getOrderBookSize(i) != 0) { 
available = true; 
totalAmount = bidPools[i].totalAmount; 


break; 


++i; 


/// @notice returns user data for an existing bid pool 
/// @param pool the pool identifier 
/// @param user the user identifier 
/// @return bidder information 
function getBidPoolUserInfo( 
uint256 pool, 


address user 


) external view returns (Bidder memory) { 


return bidPools[pool].users[user]; 


/// @notice returns number of pool bids for user 
/// @param user the user indentifier 
/// @param pool the pool identifier 
/// @return len user bids count 
function userBidIndexLength( 
address user, 
uint256 pool 
) external view returns (uint256 len) { 


uint256[] memory bidIndexes = userBidIndexes[user][pool]; 


uint256 bidIndexesLen = bidIndexes.length; 
OrderBookPoollnfo memory poollnfo = orderBooklinfos[pool]; 
for (uint256 i = 0; i < bidIndexesLen; ) { 
if (bidIndexes[i] >= poollnfo.nextBidPull) { 
bidIndexesLen--; 
} 
unchecked { 


++i; 


return bidIndexes.length; 


// *** PUBLIC FUNCTIONS *** // 


/// @notice Add a bid to a bid pool using stablecoins. 
///| @dev Works the same way as ‘bid’ but performs a swap from the stablecoin to USDO 
IIl. - if stableAssetid == usdoAssetld, no swap is performed 
/// @param user The bidder 
/// @param pool To which pool the bid should go 
/// @param stableAssetlid Stablecoin YieldBox asset id 
/// @param amountin Stablecoin amount 
/// @param data Extra data for swap operations 
function bidWithStable( 
address user, 
uint256 pool, 
uint256 stableAssetld, 
uint256 amountin, 
bytes calldata data 
) external Active { 
require(pool <= MAX_BID_POOLS, "LQ: premium too high"); 
require( 
address(liquidationQueueMeta.usdoSwapper) != address(0), 


"LQ: USDO swapper not set" 


uint256 usdoAssetid = penrose.usdoAssetld(); 
yieldBox.transfer( 
msg.sender, 
address(liquidationQueueMeta.usdoSwapper), 
stableAssetld, 


yieldBox.toShare(stableAssetld, amountin, false) 


uint256 usdoAmount = liquidationQueueMeta.usdoSwapper.swap( 
address(singularity), 
stableAssetld, 
amountin, 


data 


Bidder memory bidder = _bid(user, pool, usdoAmount, true); 


uint256 usdoValuelnLgAsset = bidder.swapOnExecute 
? liquidationQueueMeta.bidExecutionSwapper.getOutputAmount( 
address(singularity), 
usdoAssetld, 
usdoAmount, 
data 
) 


: bidder.usdoAmount; 


require( 
usdoValuelnLgAsset >= liquidationQueueMeta.minBidAmount, 


"LQ: bid too low" 


[I| @notice Add a bid to a bid pool. 
/// @dev Create an entry in `bidPools`. 
/// Clean the userBidIndex here instead of the “executeBids()* function to save on gas. 
/// @param user The bidder. 
[I| @param pool To which pool the bid should go. 
/// @param amount The amount in asset to bid. 
function bid( 
address user, 
uint256 pool, 
uint256 amount 
) external override Active { 
require(pool <= MAX_BID_POOLS, "LQ: premium too high"); 


require(amount >= liquidationQueueMeta.minBidAmount, "LQ: bid too low"); 


// Transfer assets to the LQ contract. 
uint256 assetid = IqAssetld; 
yieldBox.transfer( 

msg.sender, 


address(this), 


assetlid, 
yieldBox.toShare(assetld, amount, false) 
); 


_bid(user, pool, amount, false); 


/// @notice Activate a bid by putting it in the order book. 


/// @dev Create an entry in `orderBook`ò and remove it from *bidPoo 


Is. 


/// @dev Spam vector attack is mitigated the min amount req., 10min CD + activation 


fees. 
/// @param user The user to activate the bid for. 
[I| @param pool The target pool. 
function activateBid(address user, uint256 pool) external override { 


Bidder memory bidder = bidPools[pool].users[user]; 


require(bidder.timestamp > 0, "LQ: bid not available"); //fail early 
require( 
block.timestamp >= 
bidder.timestamp + liquidationQueueMeta.activationTime, 


"LQ: too soon" 


OrderBookPoollnfo memory poollnfo = orderBookIinfos[pool]; 


array indexes. 


// Create a new order book entry. 


// Info about the pool 


OrderBookPoolEntry memory orderBookEntry; 
orderBookEntry.bidder = user; 


orderBookEntry.bidInfo = bidder; 


// Insert the order book entry and delete the bid entry from the given pool. 
orderBookEntries[pool][poollnfo.nextBidPush] = orderBookEntry; 


delete bidPools[pool].users[user]; 


// Add the index to the user bid index. 


userBidIndexes[user][pool].push(poollnfo.nextBidPush); 


// Update the ‘orderBooklinfos >. 
unchecked { 
++poollnfo.nextBidPush; 


} 


orderBooklInfos[pool] = poollnfo; 


uint256 bidAmount = orderBookEntry.bidInfo.isUsdo 
? orderBookEntry.bidInfo.usdoAmount 
: orderBookEntry.bidInfo.liquidatedAssetAmount; 
uint256 assetValue = orderBookEntry.bidInfo.swapOnExecute 
? liquidationQueueMeta.bidExecutionSwapper.getOutputAmount( 
address(singularity), 
penrose.usdoAssetld(), 


orderBookEntry.bidInfo.usdoAmount, 


) 
: bidAmount; 
bidPools[pool].totalAmount += assetValue; 
emit ActivateBid( 
msg.sender, 
user, 
pool, 
orderBookEntry.bidInfo.usdoAmount, 
orderBookEntry.bidInfo.liquidatedAssetAmount, 
assetValue, 


block.timestamp 


/// @notice Remove a not yet activated bid from the bid pool. 
/// @dev Remove ‘msg.sender funds. 
/// @param user The user to send the funds to. 
/// @param pool The pool to remove the bid from. 
/// @return amountRemoved The amount of the bid. 
function removeBid( 
address user, 
uint256 pool 
) external override returns (uint256 amountRemoved) { 
bool isUsdo = bidPools[pool].users[msg.sender].isUsdo; 
amountRemoved = isUsdo 


? bidPools[pool].users[msg.sender].usdoAmount 


: bidPools[pool].users[msg.sender].liquidatedAssetAmount; 
require(amountRemoved > 0, "LQ: bid not available"); 


delete bidPools[pool].users[msg.sender]; 


uint256 IqAssetValue = amountRemoved; 
if (bidPools[pool].users[msg.sender].swapOnExecute) { 
IqAssetValue = liquidationQueueMeta 
.bidExecutionSwapper 
.getOutputAmount( 
address(singularity), 
penrose.usdoAssetld(), 


amountRemoved, 


} 

require( 
IqAssetValue >= liquidationQueueMeta.minBidAmount, 
"LQ: bid does not exist" 


); //save gas 


// Transfer assets 
uint256 assetid = isUsdo ? penrose.usdoAssetld() : lqAssetld; 
yieldBox.transfer( 

address(this), 

user, 


assetld, 


yieldBox.toShare(assetld, amountRemoved, false) 


emit RemoveBid( 
msg.sender, 
user, 
pool, 
isUsdo ? amountRemoved : 0, 
isUsdo ? 0 : amountRemoved, 
IqAssetValue, 


block.timestamp 


/// @notice Redeem a balance. 

//| @dev “msg.sender is used as the redeemer. 
/// @param to The address to redeem to. 
function redeem(address to) external override { 


require(balancesDue[msg.sender] > 0, "LQ: No balance due"); 


uint256 balance = balancesDue[msg.sender]; 
uint256 fee = (balance * WITHDRAWAL_FEE) / WITHDRAWAL_FEE_PRECISION; 


uint256 redeemable = balance - fee; 


balancesDue[msg.sender] = 0; 


balancesDue[liquidationQueueMeta.feeCollector] += fee; 


uint256 assetid = liquidatedAssetld; 
yieldBox.transfer( 

address(this), 

to, 

assetld, 


yieldBox.toShare(assetld, redeemable, false) 


emit Redeem(msg.sender, to, redeemable); 


/// @notice Execute the liquidation call by executing the bids placed in the pools in ASC 
order. 
/// @dev Should only be called from Singularity. 
III Singularity should send the `collateralAmountToLiquidate` to this contract before 
calling this function. 
/// Tx will fail if it can't transfer allowed Penrose asset from Singularity. 
/// @param collateralAmountToLiquidate The amount of collateral to liquidate. 
//| @param swapData Swap data necessary for swapping USDO to market asset; 
necessary only if bidder added USDO 
/// @return totalAmountExecuted The amount of asset that was executed. 
/// @return totalCollateralLiquidated The amount of collateral that was liquidated. 
function executeBids( 
uint256 collateralAmountToLiquidate, 


bytes calldata swapData 


external 
override 


returns (uint256 totalAmountExecuted, uint256 totalCollateralLiquidated) 


require(msg.sender == address(singularity), "LQ: Only Singularity"); 


BidExecutionData memory data; 


(data.curPoolld, data.isBidAvail, ) = getNextAvailBidPool(); 
data.exchangeRate = singularity.exchangeRate(); 
// We loop through all the bids for each pools until all the collateral is liquidated 
// or no more bid are available. 
while (collateralAmountToLiquidate > 0 && data.isBidAvail) { 
data.poollnfo = orderBooklInfos[data.curPoolld]; 
// Reset pool vars. 
data.totalPool[AmountExecuted = 0; 
data.totalPoolCollateralLiquidated = 0; 
// While bid pool is not empty and we haven't liquidated enough collateral. 
while ( 
collateralAmountToLiquidate > 0 && 
data.poollnfo.nextBidPull != data.poollnfo.nextBidPush 
){ 
// Get the next bid. 
data.orderBookEntry = orderBookEntries[data.curPoolld][ 


data.poollnfo.nextBidPull 


data.orderBookEntryCopy = data.orderBookEntry; 


// Get the total amount of asset with the pool discount applied for the bidder. 
data 


.discountedBidderAmount = _viewBidderDiscountedCollateralAmount( 
data.orderBookEntryCopy.bidInfo, 
data.exchangeRate, 


data.curPoolld 


// Check if the bidder can pay the remaining collateral to liquidate 


‘collateralAmountToLiquidate . 
if (data.discountedBidderAmount > collateralAmountToLiquidate) { 
( 
uint256 finalDiscountedCollateralAmount, 
uint256 finalUsdoAmount 
) = _userPartiallyBidAmount( 
data.orderBookEntryCopy.bidIinfo, 
collateralAmountToLiquidate, 
data.exchangeRate, 
data.curPoolld, 


swapData 


// Execute the bid. 


balancesDue|[ 


data.orderBookEntryCopy.bidder 


] += collateralAmountToLiquidate; // Write balance. 


if (!data.orderBookEntry.bidInfo.isUsdo) { 
data 
.orderBookEntry 
.bidInfo 
.liquidatedAssetAmount -= finalDiscountedCollateralAmount; // Update bid 
entry amount. 
} else { 
data 
.orderBookEntry 
.bidInfo 


.usdoAmount -= finalUsdoAmount; 


// Update the total amount executed, the total collateral liquidated and 
collateral to liquidate. 
data 
.totalPoolAmountExecuted += finalDiscountedCollateralAmount; 
data 
.totalPoolCollateralLiquidated += collateralAmountToLiquidate; 
collateralAmountToLiquidate = 0; // Since we have liquidated all the collateral. 


data.totalUsdoAmountUsed += finalUsdoAmount; 


orderBookEntries[data.curPoolld][data.poollnfo.nextBidPull] 


.bidInfo = data.orderBookEntry.bidInfo; 
} else { 
( 
uint256 finalCollateralAmount, 
uint256 finalDiscountedCollateralAmount, 
uint256 finalUsdoAmount 
) = _useEntireBidAmount( 
data.orderBookEntryCopy.bidInfo, 
data.discountedBidderAmount, 
data.exchangeRate, 
data.curPoolld, 
swapData 
); 
// Execute the bid. 
balancesDue[ 
data.orderBookEntryCopy.bidder 
] += finalDiscountedCollateralAmount; // Write balance. 
data.orderBookEntry.bidInfo.usdoAmount = 0; // Update bid entry amount. 
data.orderBookEntry.bidInfo.liquidatedAssetAmount = 0; // Update bid entry 
amount. 
// Update the total amount executed, the total collateral liquidated and 
collateral to liquidate. 
data.totalUsdoAmountUsed += finalUsdoAmount; 
data.totalPoolAmountExecuted += finalCollateralAmount; 
data 


.totalPoolCollateralLiquidated += finalDiscountedCollateralAmount; 


collateralAmountToLiquidate -= finalDiscountedCollateralAmount; 

orderBookEntries[data.curPoolld][data.poollnfo.nextBidPull] 
.bidInfo = data.orderBookEntry.bidInfo; 

// Since the current bid was fulfilled, get the next one. 

unchecked { 


++data.poollnfo.nextBidPull; 


} 

// Update the totals. 

totalAmountExecuted += data.totalPoolAmountExecuted; 

totalCollateralLiquidated += data.totalPoolCollateralLiquidated; 

orderBookinfos[data.curPoolld] = data.poollnfo; // Update the pool info for the 

current pool. 

// Look up for the next available bid pool. 

(data.curPoolld, data.isBidAvail, ) = getNextAvailBidPool(); 


bidPools[data.curPoolld].totalAmount -= total[AmountExecuted; 


emit ExecuteBids( 
msg.sender, 
data.curPoolld, 
data.totalUsdoAmountUsed, 
data.totalPoolAmountExecuted, 
data.totalPoolCollateralLiquidated, 


block.timestamp 


} 
// Stack too deep 
{ 


uint256 toSend = totalAmountExecuted; 


// Transfer the assets to the Singularity. 

yieldBox.withdraw( 
IqAssetid, 
address(this), 
address(this), 
toSend, 
0 

); 

yieldBox.depositAsset( 
marketAssetld, 
address(this), 
address(singularity), 
toSend, 


0 


/// @notice updates the bid swapper address 


/// @param _swapper thew new I[CollateralSwaper contract address 


function setBidExecutionSwapper(address swapper) external override { 
require(msg.sender == address(singularity), "unauthorized"); 
emit BidSwapperUpdated( 
liquidationQueueMeta.bidExecutionSwapper, 
_Swapper 
); 


liquidationQueueMeta.bidExecutionSwapper = IBidder(_Swapper); 


/// @notice updates the bid swapper address 

/// @param _swapper thew new I[CollateralSwaper contract address 

function setUsdoSwapper(address swapper) external override { 
require(msg.sender == address(singularity), "unauthorized"); 
emit UsdoSwapperUpdated(liquidationQueueMeta.usdoSwapper, swapper); 


liquidationQueueMeta.usdoSwapper = |IBidder(_swapper); 


// *** PRIVATE FUNCTIONS *** // 

function viewBidderDiscountedCollateralAmount( 
Bidder memory entry, 
uint256 exchangeRate, 
uint256 poolld 

) private view returns (uint256) { 


uint256 bidAmount = entry.isUsdo 


? entry.usdoAmount 
: entry.liquidatedAssetAmount; 
uint256 liquidatedAssetAmount = entry.swapOnExecute 
? liquidationQueueMeta.bidExecutionSwapper.getOutputAmount( 
address(singularity), 
penrose.usdoAssetld(), 
entry.usdoAmount, 


) 
: bidAmount; 
return 
_getPremiumAmount( 
_bidToCollateral(liquidatedAssetAmount, exchangeRate), 
poolld, 


MODE.ADD 


function useEntireBidAmount( 
Bidder memory entry, 
uint256 discountedBidderAmount, 
uint256 exchangeRate, 
uint256 poolld, 


bytes memory swapData 


private 


returns ( 
uint256 finalCollateralAmount, 
uint256 finalDiscountedCollateralAmount, 


uint256 finalUsdoAmount 


finalCollateralAmount = entry.liquidatedAssetAmount; 
finalDiscountedCollateralAmount = discountedBidderAmount; 
finalUsdoAmount = entry.usdoAmount; 
//Execute the swap if USDO was provided and it's different from the liqudation asset id 
if (entry.swapOnExecute) { 
yieldBox.transfer( 
address(this), 
address(liquidationQueueMeta.bidExecutionSwapper), 
penrose.usdoAssetld(), 


yieldBox.toShare(penrose.usdoAssetld(), entry.usdoAmount, false) 


finalCollateralAmount = liquidationQueueMeta 
.bidExecutionSwapper 
.swap( 
address(singularity), 
penrose.usdoAssetld(), 
entry.usdoAmount, 


swapData 


finalDiscountedCollateralAmount = _getPremiumAmount( 
_bidToCollateral(finalCollateralAmount, exchangeRate), 
poolld, 


MODE.ADD 


function _userPartiallyBidAmount( 
Bidder memory entry, 
uint256 collateralAmountToLiquidate, 
uint256 exchangeRate, 
uint256 poolld, 


bytes memory swapData 


private 
returns ( 
uint256 finalDiscountedCollateralAmount, 


uint256 finalUsdoAmount 


finalUsdoAmount = 0; 

finalDiscountedCollateralAmount = _getPremiumAmount( 
_collateralToBid(collateralAmountToLiquidate, exchangeRate), 
poolld, 


MODE.SUB 


//Execute the swap if USDO was provided and it's different from the liqudation asset id 
uint256 usdoAssetid = penrose.usdoAssetld(); 
if (entry.swapOnExecute) { 
finalUsdoAmount = liquidationQueueMeta 
.bidExecutionSwapper 
.getiInputAmount( 
address(singularity), 
usdoAssetld, 


finalDiscountedCollateralAmount, 


yieldBox.transfer( 
address(this), 
address(liquidationQueueMeta.bidExecutionSwapper), 
usdoAssetld, 
yieldBox.toShare(usdoAssetld, finalUsdoAmount, false) 
); 
uint256 returnedCollateral = liquidationQueueMeta 
.bidExecutionSwapper 
.swap( 
address(singularity), 
usdoAssetld, 


finalUsdoAmount, 


swapData 
); 
require( 
returnedCollateral >= finalDiscountedCollateralAmount, 


"need-more-collateral" 


function _bid( 
address user, 
uint256 pool, 
uint256 amount, 
bool isUsdo 

) private returns (Bidder memory bidder) { 
bidder.usdoAmount = isUsdo ? amount : 0; 
bidder.liquidatedAssetAmount = isUsdo ? 0 : amount; 
bidder.timestamp = block.timestamp; 
bidder.isUsdo = isUsdo; 


bidder.swapOnExecute = isUsdo && IqAssetid != penrose.usdoAssetld(); 


bidPools[pool].users[user] = bidder; 


emit Bid( 


msg.sender, 


user, 


pool, 
isUsdo ? amount : 0, //USDO amount 
isUsdo ? 0: amount, //liquidated asset amount 


block.timestamp 


// Clean the userBidIndex. 
uint256[] storage bidIndexes = userBidIndexes[user][pool]; 
uint256 bidIndexesLen = bidIndexes.length; 
OrderBookPoollnfo memory poollnfo = orderBooklInfos[pool]; 
for (uint256 i = 0; i < bidlIndexesLen; ) { 
if (bidIndexes[i] >= poollnfo.nextBidPull) { 
bidIndexesLen = bidIndexes.length; 
bidIndexes[i] = bidIndexes[bidIndexesLen - 1]; 
bidIndexes.pop(); 
} 
unchecked { 


++i; 


/// @notice Called with `init`, setup the initial pool info values. 
/// @param pool The targeted pool. 
function _initOrderBookPoollnfo(uint256 pool) internal { 


OrderBookPoollnfo memory poollnfo; 


poollnfo.poolld = uint32(pool); 


orderBooklInfos[pool] = poollnfo; 


/// @notice Get the discount gained from a bid in a `poolld`ò given a “amount. 
[I| @param amount The amount of collateral to get the discount from. 
/// @param poolld The targeted pool. 
[I| @param mode 0 subtract - 1 add. 
function _getPremiumAmount( 

uint256 amount, 

uint256 poolld, 

MODE mode 
) internal pure returns (uint256) { 

uint256 premium = (amount * poolld * PREMIUM_FACTOR) / 

PREMIUM FACTOR _ PRECISION; 


return mode == MODE.ADD ? amount + premium : amount - premium; 


/// @notice Convert a bid amount to a collateral amount. 
/// @param amount The amount of bid to convert. 
/// @param exchangeRate The exchange rate to use. 
function _bidToCollateral( 

uint256 amount, 

uint256 exchangeRate 
) internal pure returns (uint256) { 


return (amount * exchangeRate) / EXCHANGE_RATE_PRECISION; 


/// @notice Convert a collateral amount to a bid amount. 
/// @param collateralAmount The amount of collateral to convert. 
[I| @param exchangeRate The exchange rate to use. 
function _collateralToBid( 
uint256 collateralAmount, 
uint256 exchangeRate 
) internal pure returns (uint256) { 


return (collateralAmount * EXCHANGE_RATE_PRECISION) / exchangeRate; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\LiquidationQueue\bidders/Curv 
eStableToUsdoBidder.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


import "@boringcrypto/boring-solidity/contracts/BoringOwnable.sol"; 


import "../../interfaces/ISwapper.sol"; 

import "../../interfaces/IPenrose.sol"; 

import "../../interfaces/ISingularity.sol"; 

import "../../interfaces/ILiquidationQueue.sol"; 
import "../../Swapper/interfaces/ICurvePool.sol"; 


import "tapioca-sdk/dist/contracts/YieldBox/contracts/interfaces/lYieldBox.sol"; 
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/// @title Swaps Stable to USDO through Curve 
/// @dev Performs a swap operation between stable and USDO through 3CRV+USDO pool 
contract CurveStableToUsdoBidder is BoringOwnable { 


/// @notice 3Crv+USDO swapper 


ICurveSwapper public curveSwapper; 


/// @notice Curve pool assets number 


uint256 curveAssetsLength; 


// *** EVENTS *** // 
/// @notice event emitted when the ISwapper property is updated 


event CurveSwapperUpdated(address indexed old, address indexed _new); 


/// @notice creates a new CurveStableToUsdoBidder 

/// @param curveSwapper_ CurveSwapper address 

/// @param curvePoolAssetCount_ Curve pool assets number 

constructor(ICurveSwapper curveSwapper_, uint256 curvePoolAssetCount_) { 
CurveSwapper = curveSwapper ; 


curveAssetsLength = curvePoolAssetCount_; 


// *** VIEW FUNCTIONS *** // 


/// @notice returns the unique name 
function name() external pure returns (string memory) { 


return "stable -> USDO (3Crv+USDO)"; 


/// @notice returns the amount of collateral 


/// @param singularity Singularity market address 
/// @param tokenInld Token in YielxBox id 
/// @param amountin Stablecoin amount 
/// @return output amount 
function getOutputAmount( 
ISingularity singularity, 
uint256 tokenInld, 
uint256 amountin, 
bytes calldata 
) external view returns (uint256) { 
require( 
IPenrose(singularity.penrose()).usdoToken() != address(0), 


"USDO not set" 


uint256 usdoAssetld = IPenrose(singularity.penrose()).usdoAssetld(); 
if (tokenInld == usdoAssetld) { 


return amountin; 


return 
_getOutput( 
lYieldBox(singularity.yieldBox()), 
tokenInld, 
usdoAssetld, 


amountin 


/// @notice returns token tokenIn amount based on tokenOut amount 
/// @param singularity Singularity market address 
/// @param tokenInld Token in YielxBox id 
/// @param amountOut Token out amount 
/// @return input amount 
function getInoputAmount( 

ISingularity singularity, 

uint256 tokenInld, 

uint256 amountOut, 

bytes calldata 
) external view returns (uint256) { 

require( 

IPenrose(singularity.penrose()).usdoToken() != address(0), 


"USDO not set" 


uint256 usdoAssetld = IPenrose(singularity.penrose()).usdoAssetld(); 
if (tokenInld == usdoAssetld) { 


return amountOut; 


return 


_getOutput( 


lYieldBox(singularity.yieldBox()), 
usdoAssetld, 
tokentInlid, 


amountOut 


// *** PUBLIC FUNCTIONS *** // 


/// @notice swaps stable to collateral 
/// @param singularity Singularity market address 
/// @param tokenlInid Stablecoin asset id 
/// @param amountin Stablecoin amount 
/// @param data extra data used for the swap operation 
/// @return obtained amount 
function swap( 
ISingularity singularity, 
uint256 tokenInld, 
uint256 amountin, 
bytes calldata data 
) external returns (uint256) { 
IPenrose penrose = |IPenrose(singularity.penrose()); 
require(penrose.usdoToken() != address(0), "USDO not set"); 


require( 


penrose.isMarketRegistered(address(singularity)), 
"Market not valid" 
); 
lYieldBox yieldBox = lYieldBox(singularity.yieldBox()); 
ILiquidationQueue liquidationQueue = ILiquidationQueue( 


singularity. liquidationQueue() 


uint256 usdoAssetld = IPenrose(singularity.penrose()).usdoAssetld(); 
require(msg.sender == address(liquidationQueue), "only LQ"); 
if (tokenInld == usdoAssetld) { 
yieldBox.transfer( 
address(this), 
address(liquidationQueue), 
tokenInld, 
yieldBox.toShare(tokenInIid, amountin, false) 
); 


return amountin; 


uint256 usdoMin = 0; 
if (data.length > 0) { 

//should always be sent 

_usdoMin = abi.decode(data, (uint256)); 
} 


yieldBox.transfer( 


address(this), 
address(curveSwapper), 
tokenInld, 
yieldBox.toShare(tokenInid, amountin, false) 
); 
return 
_swap( 
yieldBox, 
tokenInld, 
usdoAssetld, 
amountin, 
_usdoMin, 


address(liquidationQueue) 


// *** OWNER FUNCTIONS *** // 

/// @notice sets the Curve swapper 

/// @dev used for USDO to WETH swap 

/// @param _swapper The curve pool swapper address 

function setCurveSwapper(ICurveSwapper swapper) external onlyOwner { 
emit CurveSwapperUpdated(address(curveSwapper), address(_swapper)); 


curveSwapper = _swapper; 


// *** PRIVATE FUNCTIONS *** // 
function getCurvelndex(address token) private view returns (uint256) { 
ICurvePool pool = ICurvePool(curveSwapper.curvePool()); 
int256 index = -1; 
for (uint256 i = 0; i < curveAssetsLength; i++) { 
address tokenAtIindex = pool.coins(i); 
if (tokenAtIndex == token) { 


index = int256(i); 


} 
require(index > -1, "asset not found"); 


return uint256(index); 


function getOutput( 
lYieldBox yieldBox, 
uint256 tokenInld, 
uint256 tokenOutld, 
uint256 amountin 
) private view returns (uint256) { 
(, address tokenInAddress, , ) = yieldBox.assets(tokenInld); 


(, address tokenOutAddress, , ) = yieldBox.assets(tokenOutld); 


uint256 tokenInCurvelndex = _getCurvelndex(tokenInAddress); 
uint256 tokenOutCurvelndex = _getCurvelndex(tokenOutAddress); 
uint256[] memory indexes = new uint256[](2); 

indexes[0] = tokenInCurvelndex; 


indexes[1] = tokenOutCurvelndex; 


uint256 share = yieldBox.toShare(tokenInid, amountin, false); 


ISwapper.SwapData memory swapData = curveSwapper.buildSwapData( 
tokenlInld, 
tokenOutld, 
amountin, 
share, 
true, 
true 
); 


return curveSwapper.getOutputAmount(swapData, abi.encode(indexes)); 


function swap( 
lYieldBox yieldBox, 
uint256 stableAssetlid, 
uint256 usdoAssetld, 
uint256 amountin, 
uint256 minAmount, 


address to 


) private returns (uint256) { 
(, address tokenInAddress, , ) = yieldBox.assets(stableAssetld); 


(, address tokenOutAddress, , ) = yieldBox.assets(usdoAssetld); 


uint256 tokenInCurvelndex = _getCurvelndex(tokenInAddress); 


uint256 tokenOutCurvelndex = _getCurvelndex(tokenOutAddress); 


uint256[] memory indexes = new uint256[](2); 
indexes[0] = tokenInCurvelndex; 
indexes[1] = tokenOutCurvelndex; 


uint256 tokenInShare = yieldBox.toShare(stableAssetld, amountin, false); 


ISwapper.SwapData memory swapData = curveSwapper.buildSwapData( 
stableAssetld, 
usdoAssetld, 
O, 
tokenInShare, 
true, 
true 
); 
(uint256 amountOut, ) = curveSwapper.swap( 
swapData, 
minAmount, 
to, 


abi.encode(indexes) 


return amountOut; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\LiquidationQueue\bidders/UniU 
sdoToWethBidder.sol---- 
// SPDX-License-lIdentifier: UNLICENSED 


pragma solidity *0.8.18; 


import "@boringcrypto/boring-solidity/contracts/BoringOwnable.sol"; 


import "../../interfaces/IPenrose.sol"; 

import "../../interfaces/ISwapper.sol"; 

import "../../interfaces/ISingularity.sol"; 
import "../../interfaces/ILiquidationQueue.sol"; 


import "tapioca-sdk/dist/contracts/YieldBox/contracts/interfaces/lYieldBox.sol"; 
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/// @title Swaps USDO to WETH UniswapV2 
/II @dev Performs 1 swap operation: 


///_ -USDO to Weth through UniV2 
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contract UniUsdoToWethBidder is BoringOwnable { 


/// @notice UniswapV2 swapper 


ISwapper public univ2Swapper; 
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/// @notice YieldBox WETH asset id 


uint256 wethld; 


//{ *** EVENTS *** // 
/// @notice event emitted when the ISwapper property is updated 


event UniV2SwapperUpdated(address indexed old, address indexed _new); 


/// @notice Creates a new UniUsdoToWethBidder contract 

/// @param uniV2Swapper_ UniswapV2 swapper address 

/// @param _wethAssetld YieldBox WETH asset id 

constructor(ISwapper uniV2Swapper_, uint256 _wethAssetld) { 
univ2Swapper = uniV2Swapper ; 


wethld = _wethAssetld; 


// *** VIEW FUNCTIONS *** // 
/// @notice returns the unique name 
function name() external pure returns (string memory) { 


return "USDO -> WETH (Uniswap V2)"; 


/// @notice returns token tokenIn amount based on tokenOut amount 
/// @param singularity Singularity market address 
/// @param tokentInld Input token YieldBox id 
/// @param amountOut Token out amount 
/// @return amount out 
function getInputAmount( 
ISingularity singularity, 
uint256 tokenInld, 
uint256 amountOut, 
bytes calldata 
) external view returns (uint256) { 
require( 
tokenInid == |IPenrose(singularity.penrose()).usdoAssetld(), 
"token not valid" 
); 
lYieldBox yieldBox = lYieldBox(singularity.yieldBox()); 


uint256 shareOut = yieldBox.toShare(wethld, amountOut, false); 


ISwapper.SwapData memory swapData = univ2Swapper.buildSwapData( 
tokenInld, 


wethid, 


swapData.amountData.shareOut = shareOut; 


return univ2Swapper.getinputAmount(swapData, ""); 


/// @notice returns the amount of collateral 
/// @param singularity Singularity market address 
/// @param tokenInld Token in YielxBox id 
/// @param amountin Stablecoin amount 
/// @return input amount 
function getOutputAmount( 
ISingularity singularity, 
uint256 tokenInld, 
uint256 amountin, 
bytes calldata 
) external view returns (uint256) { 
require( 
IPenrose(singularity.penrose()).usdoToken() != address(0), 
"USDO not set" 
); 
uint256 usdoAssetld = IPenrose(singularity.penrose()).usdoAssetld(); 


require(tokenInid == usdoAssetld, "token not valid"); 


return 
_uniswapOutputAmount( 


lYieldBox(singularity.yieldBox()), 


usdoAssetld, 
wethld, 


amountin 


// *** PUBLIC FUNCTIONS *** // 
/// @notice swaps stable to collateral 
/// @param singularity Singularity market address 
/// @param tokenInld Token in asset Id 
/// @param amountin Stablecoin amount 
/// @param data extra data used for the swap operation 
/// @return obtained amount 
function swap( 
ISingularity singularity, 
uint256 tokenInld, 
uint256 amountin, 
bytes calldata data 
) external returns (uint256) { 
IPenrose penrose = |IPenrose(singularity.penrose()); 
require(penrose.usdoToken() != address(0), "USDO not set"); 
require( 
penrose.isMarketRegistered(address(singularity)), 


"Market not valid" 


); 
lYieldBox yieldBox = lYieldBox(singularity.yieldBox()); 
ILiquidationQueue liquidationQueue = ILiquidationQueue( 


singularity.liquidationQueue() 


uint256 usdoAssetld = IPenrose(singularity.penrose()).usdoAssetld(); 
require(tokenInid == usdoAssetld, "token not valid"); 


require(msg.sender == address(liquidationQueue), "only LQ"); 


uint256 assetMin = 0; 
if (data.length > 0) { 
//should always be sent 


assetMin = abi.decode(data, (uint256)); 


yieldBox.transfer( 
address(this), 
address(univ2Swapper), 
tokenInld, 


yieldBox.toShare(tokenInid, amountin, false) 


return 
_uniswapSwap( 


yieldBox, 


usdoAssetld, 
wethld, 
amountin, 
assetMin, 


address(liquidationQueue) 


// *** OWNER FUNCTIONS *** // 

/// @notice sets the UniV2 swapper 

/// @dev used for WETH to USDC swap 

/// @param _swapper The UniV2 pool swapper address 

function setUniswapSwapper(ISwapper swapper) external onlyOwner { 
emit UniV2SwapperUpdated(address(univ2Swapper), address(_swapper)); 


univ2Swapper = _swapper; 


// *** PRIVATE FUNCTIONS *** // 
function uniswapSwap( 
lYieldBox yieldBox, 
uint256 tokenInld, 


uint256 tokenOutld, 


uint256 tokenInAmount, 
uint256 minAmount, 
address to 
) private returns (uint256) { 
(, address tokenInAddress, , ) = yieldBox.assets(tokenInld); 
(, address tokenOutAddress, , ) = yieldBox.assets(tokenOutld); 
address[] memory swapPath = new address[](2); 
swapPath[0] = tokenInAddress; 
swapPath[1] = tokenOutAddress; 
uint256 tokenInShare = yieldBox.toShare( 
tokenInld, 
tokenInAmount, 


false 


ISwapper.SwapData memory swapData = univ2Swapper.buildSwapData( 
tokenlInld, 
tokenOutld, 
O, 
tokenInShare, 
true, 
true 
); 


(uint256 outAmount, ) = univ2Swapper.swap(SswapData, minAmount, to, ""); 


return outAmount; 


function uniswapOutputAmount( 
lYieldBox yieldBox, 
uint256 tokenInld, 
uint256 tokenOutld, 
uint256 amountin 

) private view returns (uint256) { 
(, address tokenInAddress, , ) = yieldBox.assets(tokenInld); 
(, address tokenOutAddress, , ) = yieldBox.assets(tokenOutld); 
address[] memory swapPath = new address[](2); 
swapPath[0] = tokenInAddress; 
swapPath[1] = tokenOutAddress; 


uint256 tokenInShare = yieldBox.toShare(tokenInid, amountin, false); 


ISwapper.SwapData memory swapData = univ2Swapper.buildSwapData( 
tokenlInld, 
tokenOutld, 
O, 
tokenInShare, 
true, 


true 


return univ2Swapper.getOutputAmount(swapData, ""); 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\Magnetar/MagnetarV2.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


//0Z 
import "@openzeppelin/contracts/access/Ownable.sol"; 


import "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol"; 


/[TAPIOCA 
import "./MagnetarV2Storage.sol"; 


import "./modules/MagnetarMarketModule.sol"; 


/ x 
_/\\\\\\\\\\\\\\ /\\\\\\\\ /\\\\\\\\\\\\___/\\\\\\\\\ /\\\\ /\\\\\\\\\ /\\\\\\\\ 
t 
MITA _IWWAX\\\\\\__\W/HIISW_ MW. AVIN AVLANAN 
V\\\ AVAN ANAN V\\\ VA\\ \V_\V/M\\___W. I\W/1 
HHN 
VA\\ VA\\ VALAA iV VA\\ /\\\ VA\\\_M\\ VA\\\_ 


V\\\ VAAL VAV///////1. VAN V\\\ V\\_VAM, VAM\\\\ 


WAAL 


V\\\ AWM AA 
MITT 

V\\\ VA\\ VANAN 
\\ AVAN\ 

\V\\\ VA\\ VANAN 
__V\\\ 

VII V// V/I_NI/ 

VII 


| 


/// @title Magnetar contract 


/// @notice Generic helper contract 
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/// @dev can execute individual or combined actions on BigBang/Market/tOFT and USDO 


III - the ‘burst’ method allows combining multiple calls into 1 transaction 


contract MagnetarV2 is Ownable, MagnetarV2Storage { 


using SafeERC20 for IERC20; 


using RebaseLibrary for Rebase; 


enum Module { 


Market 


/// @notice returns the Market module 


MagnetarMarketModule public marketModule; 


constructor(address owner, address payable marketModule) { 
transferOwnership(_owner); 


marketModule = MagnetarMarketModule(_marketModule); 


// *** VIEW METHODS *** // 
/// @notice returns Singularity markets' information 
/// @param who user to return for 
[I| @param markets the list of Singularity markets to query for 
function singularityMarketInfo( 
address who, 
ISingularity[] calldata markets 
) external view returns (SingularityInfo[] memory) { 


return _singularityMarketInfo(who, markets); 


/// @notice returns BigBang markets’ information 
/// @param who user to return for 
[I| @param markets the list of BigBang markets to query for 
function bigBangMarketinfo( 
address who, 
IBigBang[] calldata markets 
) external view returns (BigBangInfo[] memory) { 


return _bigBangMarketInfo(who, markets); 


/// @notice Calculate the collateral amount off the shares. 
/// @param market the Singularity or BigBang address 
[I| @param share The shares. 
/// @return amount The amount. 
function getCollateralAmountForShare( 
IMarket market, 
uint256 share 
) public view returns (uint256 amount) { 
lYieldBoxBase yieldBox = lYieldBoxBase(market.yieldBox()); 


return yieldBox.toAmount(market.collateralld(), share, false); 


/// @notice Calculate the collateral shares that are needed for ‘borrowPart’, 
/// taking the current exchange rate into account. 
/// @param market the Singularity or BigBang address 


/// @param borrowPart The borrow part. 


/// @return collateralShares The collateral shares. 
function getCollateralSharesForBorrowPart( 
IMarket market, 
uint256 borrowPart, 
uint256 liquidationMultiplierPrecision, 
uint256 exchangeRatePrecision 
) public view returns (uint256 collateralShares) { 
Rebase memory _totalBorrowed; 
(uint128 totalBorrowElastic, uintl28 totalBorrowBase) = market 
.totalBorrow(); 


_totalBorrowed = Rebase(totalBorrowElastic, totalBorrowBase); 


lYieldBoxBase yieldBox = lYieldBoxBase(market. yieldBox()); 
uint256 borrowAmount = _totalBorrowed.toElastic(borrowPart, false); 
return 
yieldBox.toShare( 
market.collateralld(), 
(borrowAmount * 
market. liquidationMultiplier() * 
market.exchangeRate()) / 
(liquidationMultiplierPrecision * exchangeRatePrecision), 


false 


/// @notice Return the equivalent of borrow part in asset amount. 


/// @param market the Singularity or BigBang address 
[I| @param borrowPart The amount of borrow part to convert. 
/// @return amount The equivalent of borrow part in asset amount. 
function getAmountForBorrowPart( 
IMarket market, 
uint256 borrowPart 
) public view returns (uint256 amount) { 
Rebase memory _totalBorrowed; 
(uint128 totalBorrowElastic, uintl28 totalBorrowBase) = market 
.totalBorrow(); 


_totalBorrowed = Rebase(totalBorrowElastic, totalBorrowBase); 


return totalBorrowed.toElastic(borrowPart, false); 


/// @notice Return the equivalent of amount in borrow part. 
/// @param market the Singularity or BigBang address 
/// @param amount The amount to convert. 
/// @return part The equivalent of amount in borrow part. 
function getBorrowPartForAmount( 
IMarket market, 
uint256 amount 
) public view returns (uint256 part) { 
Rebase memory _totalBorrowed; 
(uint128 totalBorrowElastic, uintl28 totalBorrowBase) = market 


.totalBorrow(); 


_totalBorrowed = Rebase(totalBorrowElastic, totalBorrowBase); 


return totalBorrowed.toBase(amount, false); 


/// @notice Compute the amount of ‘singularity.assetld* from `fraction` 
/// ‘fraction’ can be ‘singularity.accruelnfo.feeFraction’ or ‘singularity.balanceOf 
/// @param singularity the singularity address 
/// @param fraction The fraction. 
/// @return amount The amount. 
function getAmountForAssetFraction( 
ISingularity singularity, 
uint256 fraction 
) public view returns (uint256 amount) { 
(uintl28 totalAssetElastic, uintl28 totalAssetBase) = singularity 


.totalAsset(); 


lYieldBoxBase yieldBox = lYieldBoxBase(singularity.yieldBox()); 
return 
yieldBox.toAmount( 
singularity.assetld(), 
(fraction * totalAssetElastic) / totalAssetBase, 


false 


/// @notice Compute the fraction of “singularity.assetld’ from `amount` 
/// ‘fraction’ can be ‘singularity.accruelnfo.feeFraction’ or ‘singularity.balanceOf 
/// @param singularity the singularity address 
/// @param amount The amount. 
/// @return fraction The fraction. 
function getFractionForAmount( 
ISingularity singularity, 
uint256 amount 
) public view returns (uint256 fraction) { 
(uintl28 totalAssetShare, uint128 totalAssetBase) = singularity 
.totalAsset(); 
(uint128 totalBorrowElastic, ) = singularity.totalBorrow(); 


uint256 assetid = singularity.assetld(); 


lYieldBoxBase yieldBox = lYieldBoxBase(singularity.yieldBox()); 


uint256 share = yieldBox.toShare(assetld, amount, false); 


uint256 allShare = totalAssetShare + 


yieldBox.toShare(assetld, totalBorrowElastic, true); 


fraction = allShare == 0 ? share : (share * totalAssetBase) / allShare; 


// *** PUBLIC METHODS *** // 


/// @notice Batch multiple calls together 
/// @param calls The list of actions to perform 
function burst( 
Call[] calldata calls 
) external payable returns (Result[] memory returnData) { 


uint256 valAccumulator; 


uint256 length = calls.length; 


returnData = new Result[](length); 


for (uint256 i = 0; i < length; i++) { 
Call calldata _action = calls[i]; 
if (!_action.allowFailure) { 
require( 
_action.call.length > 0, 
string.concat( 
"MagnetarV2: Missing call for action with index", 


string(abi.encode(i)) 


unchecked { 


valAccumulator += _action.value; 


if (_action.id == PERMIT ALL) { 
_permit( 

_action.target, 

_action.call, 

true, 

_action.allowFailure 
); 

} else if (_action.id == PERMIT) { 

_permit( 
_action.target, 
_action.call, 
false, 
_action.allowFailure 

); 

} else if (_action.id == TOFT_WRAP) { 
WrapData memory data = abi.decode(_action.call[4:], (WrapData)); 
_checkSender(data.from); 
if (_action.value > 0) { 

unchecked { 
valAccumulator += _action.value; 
} 
ITapiocaOFT(_action.target).wrapNative{ 
value: _action.value 
}(data.to); 
} else { 


ITapiocaOFT(_action.target).wrap( 


msg.sender, 
data.to, 


data.amount 


} 
} else if (_action.id == TOFT_SEND_FROM) { 
( 
address from, 
uint16 dstChainld, 
bytes32 to, 
uint256 amount, 
ISendFrom.LzCallParams memory |zCallParams 
) = abi.decode( 
_action.call[4:], 
( 
address, 
uint16, 
bytes32, 
uint256, 


(ISendFrom.LzCallParams) 


); 


_checkSender(from); 


ISendFrom(_action.target).sendFrom{value: _action.value}( 


msg.sender, 


dstChainld, 
to, 
amount, 
IzCallParams 
); 
} else if (_action.id == YB_DEPOSIT_ASSET) { 
YieldBoxDepositData memory data = abi.decode( 
_action.call[4:], 
(YieldBoxDepositData) 
); 


_checkSender(data.from); 


(uint256 amountOut, uint256 shareOut) = lYieldBoxBase( 
_action.target 
).depositAsset( 
data.assetld, 
msg.sender, 
data.to, 
data.amount, 
data.share 
); 
returnDatal[i] = Result({ 
success: true, 
returnData: abi.encode(amountOut, shareOut) 
H; 


} else if (_action.id == MARKET_ADD_COLLATERAL) { 


SGLAddCollateralData memory data = abi.decode( 
_action.call[4:], 
(SGLAddCollateralData) 

); 


_checkSender(data.from); 


IMarket(_action.target).addCollateral( 
msg.sender, 
data.to, 
data.skim, 
data.amount, 
data.share 
); 
} else if (_action.id == MARKET BORROW) { 
SGLBorrowData memory data = abi.decode( 
_action.call[4:], 
(SGLBorrowData) 
); 


_checkSender(data.from); 


(uint256 part, uint256 share) = IMarket(_action.target).borrow( 
msg.sender, 
data.to, 
data.amount 

); 


returnData[i] = Result({ 


success: true, 
returnData: abi.encode(part, share) 
H; 
} else if (_action.id == YB_WITHDRAW_TO) { 
( 
address yieldBox, 
address from, 
uint256 assetld, 
uint16 dstChainld, 
bytes32 receiver, 
uint256 amount, 
uint256 share, 
bytes memory adapterParams, 
address payable refundAddress 
) = abi.decode( 
_action.call[4:], 
( 
address, 
address, 
uint256, 
uint16, 
bytes32, 
uint256, 
uint256, 
bytes, 


address 


_executeModule( 
Module.Market, 
abi.encodeWithSelector( 

MagnetarMarketModule.withdrawToChain.selector, 
yieldBox, 

from, 

assetld, 

dstChainld, 

receiver, 

amount, 

share, 

adapterParams, 

refundAddress, 


_action.value 


ji 
} else if (_action.id == MARKET LEND) { 
SGLLendData memory data = abi.decode( 
_action.call[4:], 
(SGLLendData) 
); 


_checkSender(data.from); 


uint256 fraction = IMarket(_action.target).addAsset( 
msg.sender, 
data.to, 
data.skim, 
data.share 
); 
returnData[i] = Result({ 
success: true, 
returnData: abi.encode(fraction) 
}); 
} else if (_action.id == MARKET REPAY) { 
SGLRepayData memory data = abi.decode( 
_action.call[4:], 
(SGLRepayData) 
); 


_checkSender(data.from); 


uint256 amount = IMarket(_action.target).repay( 
msg.sender, 
data.to, 
data.skim, 
data.part 
); 
returnData[i] = Result({ 
success: true, 


returnData: abi.encode(amount) 


bi 
} else if (_action.id == TOFT_ SEND_AND_BORROW) { 
( 
address from, 
address to, 
uint16 IzDstChainld, 
bytes memory airdropAdapterParams, 
ITapiocaOFT.IBorrowParams memory borrowParams, 
ICommonData.IWithdrawParams memory withdrawParams, 
ICommonData.ISendOptions memory options, 
ICommonData.I|Approval[] memory approvals 
) = abi.decode( 
_action.call[4:], 
( 
address, 
address, 
uint16, 
bytes, 
ITapiocaOFT.IBorrowParams, 
ICommonData.I|WithdrawParams, 
ICommonData.ISendOptions, 


ICommonData.lApproval[] 


); 


_checkSender(from); 


ITapiocaOFT(_action.target).sendToYBAndBorrow{ 


}( 


}; 


value: _action.value 


msg.sender, 

to, 

IzDstChainld, 
airdropAdapterParams, 
borrowParams, 
withdrawParams, 
options, 


approvals 


} else if (_action.id == TOFT_ SEND_AND_LEND) { 


( 


address from, 

address to, 

uint16 dstChainld, 

address zroPaymentAddress, 
IUSDOBase.|ILendOrRepayParams memory lendParams, 
ICommonData.IApproval[] memory approvals, 
ICommonData.IWithdrawParams memory withdrawParams, 


bytes memory adapterParams 


) = abi.decode( 


_action.call[4:], 


( 


address, 


address, 

uint16, 

address, 
(IUSDOBase.ILendOrRepayParams), 
(ICommonData.IApproval[]), 
(ICommonData.I|WithdrawParams), 


bytes 


); 


_checkSender(from); 


IUSDOBase(_action.target).sendAndLendOrRepay { 
value: _action.value 
}( 
msg.sender, 
to, 
dstChainld, 
zroPaymentAddress, 
lendParams, 
approvals, 
withdrawParams, 
adapterParams 
); 
} else if (_action.id == TOFT_ DEPOSIT TO STRATEGY) { 
TOFTSendToStrategyData memory data = abi.decode( 


_action.call[4:], 


(TOFTSendToStrategyData) 
); 


_checkSender(data.from); 


ITapiocaOFT(_action.target).sendToStrategy{ 
value: _action.value 
}( 
msg.sender, 
data.to, 
data.amount, 
data.share, 
data.assetld, 
data.lzDstChainld, 
data.options 
); 
} else if (_action.id == TOFT_RETRIEVE_FROM_STRATEGY) { 
( 
address from, 
uint256 amount, 
uint256 share, 
uint256 assetld, 
uint16 IzDstChainld, 
address zroPaymentAddress, 
bytes memory airdropAdapterParam 
) = abi.decode( 


_action.call[4:], 


address, 
uint256, 
uint256, 
uint256, 
uint16, 

address, 


bytes 


_checkSender(from); 


ITapiocaOFT(_action.target).retrieveFromStrategy { 
value: _action.value 

}( 
msg.sender, 
amount, 
share, 
assetld, 
IzDstChainld, 
zroPaymentAddress, 
airdropAdapterParam 

); 

} else if (_action.id == MARKET_YBDEPOSIT_AND_LEND) { 


HelperLendData memory data = abi.decode( 


_action.call[4:], 


(HelperLendData) 


_executeModule( 

Module.Market, 

abi.encodeWithSelector( 
MagnetarMarketModule.mintFromBBAndLendOnSGL.selector, 
data.user, 
data.lendAmount, 
data.mintData, 
data.depositData, 
data.lockData, 
data.participateData, 


data.externalContracts 


); 
} else if (_action.id == MARKET_YBDEPOSIT_COLLATERAL_AND BORROW) { 
( 
address market, 
address user, 
uint256 collateralAmount, 
uint256 borrowAmount, 
bool deposit, 


ICommonData.I|WithdrawParams memory withdrawParams 


) = abi.decode( 
_action.call[4:], 
( 
address, 
address, 
uint256, 
uint256, 
bool, 
bool, 


ICommonData.IWithdrawParams 


_executeModule( 
Module.Market, 
abi.encodeWithSelector( 

MagnetarMarketModule 
.depositAddCollateralAndBorrowFromMarket 
selector, 

market, 

user, 

collateralAmount, 

borrowAmount, 

false, 

deposit, 


withdrawParams 


); 
} else if (_action.id == MARKET REMOVE _ASSET) { 
HelperMarketRemoveAndRepayAsset memory data = abi.decode( 
_action.call[4:], 


(HelperMarketRemoveAndRepayAsset) 


_executeModule( 
Module.Market, 
abi.encodeWithSelector( 
MagnetarMarketModule 
.exitPositionAndRemoveCollateral 
selector, 
data.user, 
data.externalData, 


data.removeAndRepayData 


); 
} else if (_action.id == MARKET_DEPOSIT_REPAY_REMOVE COLLATERAL) { 
HelperDepositRepayRemoveCollateral memory data = abi.decode( 
_action.call[4:], 


(HelperDepositRepayRemovecCollateral) 


_executeModule( 


Module.Market, 
abi.encodeWithSelector( 
MagnetarMarketModule 
.depositRepayAndRemoveCollateralFromMarket 
selector, 
data.market, 
data.user, 
data.depositAmount, 
data.repayAmount, 
data.collateralAmount, 
data.extractFromSender, 


data.withdrawCollateralParams 


); 
} else if (_action.id == MARKET BUY COLLATERAL) { 
HelperBuyCollateral memory data = abi.decode( 
_action.call[4:], 


(HelperBuyCollateral) 


IMarket(data.market).buyCollateral( 
data.from, 
data.borrowAmount, 
data.supplyAmount, 
data.minAmountOut, 


address(data.swapper), 


data.dexData 
); 
} else if (_action.id == MARKET SELL_COLLATERAL) { 
HelperSellCollateral memory data = abi.decode( 
_action.call[4:], 


(HelperSellCollateral) 


IMarket(data.market).sellCollateral( 
data.from, 
data.share, 
data.minAmountOut, 
address(data.swapper), 
data.dexData 
); 
} else if (_action.id == TAP_EXERCISE OPTION) { 
HelperExerciseOption memory data = abi.decode( 
_action.call[4:], 


(HelperExerciseOption) 


ITapiocaOptionsBrokerCrossChain(_action.target).exerciseOption( 
data.optionsData, 
data.|zData, 
data.tapSendData, 


data.approvals 


); 
} else if (_action.id == MARKET MULTIHOP_BUY) { 
HelperMultiHopBuy memory data = abi.decode( 
_action.call[4:], 


(HelperMultiHopBuy) 


IUSDOBase(_action.target).initMultiHopBuy( 
data.from, 
data.collateralAmount, 
data.borrowAmount, 
data.swapData, 
data.|zData, 
data.externalData, 
data.airdropAdapterParams, 
data.approvals 

); 

} else if (_action.id == MARKET MULTIHOP_BUY) { 

HelperMultiHopBuy memory data = abi.decode( 

_action.call[4:], 


(HelperMultiHopBuy) 


IUSDOBase(_action.target).initMultiHopBuy( 
data.from, 


data.collateralAmount, 


data.borrowAmount, 
data.swapData, 
data.lzData, 
data.externalData, 
data.airdropAdapterParams, 
data.approvals 
); 
} else if (_action.id == TOFT_REMOVE_AND REPAY) { 
HelperTOFTRemoveAndRepayAsset memory data = abi.decode( 
_action.call[4:], 


(Helper[OFTRemoveAndRepayAsset) 


IUSDOBase(_action.target).removeAsset( 
data.from, 
data.to, 
data.lzDstChainld, 
data.zroPaymentAddress, 
data.adapterParams, 
data.externalData, 
data.removeAndRepayData, 
data.approvals 

); 

} else { 


revert("MagnetarV2: action not valid"); 


require(msg.value == valAccumulator, "MagnetarV2: value mismatch"); 


/// @notice performs a withdraw operation 


/// @dev it can withdraw on the current chain or it can send it to another one 


///_ _- if “dstChainld~ is 0 performs a same-chain withdrawal 
III - all parameters except `yieldBox`, `from`, “assetid’ and “amount or ‘share’ are 
ignored 


IIL. _- if “dstChainld* is NOT O0, the method requires gas for the `sendFrom` operation 
/// @param yieldBox the YieldBox address 
/// @param from user to withdraw from 
/// @param assetld the YieldBox asset id to withdraw 
/// @param dstChainld LZ chain id to withdraw to 
/// @param receiver the receiver on the destination chain 
/// @param amount the amount to withdraw 
/// @param share the share to withdraw 
/// @param adapterParams LZ adapter params 
/// @param refundAddress the LZ refund address which receives the gas not used in the 
process 
/// @param gas the amount of gas to use for sending the asset to another layer 
function withdrawToChain( 
lYieldBoxBase yieldBox, 
address from, 


uint256 assetld, 


uint16 dstChainld, 
bytes32 receiver, 
uint256 amount, 
uint256 share, 
bytes memory adapterParams, 
address payable refundAddress, 
uint256 gas 
) external payable { 
_executeModule( 
Module.Market, 
abi.encodeWithSelector( 
MagnetarMarketModule.withdrawToChain.selector, 
yieldBox, 
from, 
assetld, 
dstChainld, 
receiver, 
amount, 
share, 
adapterParams, 
refundAddress, 


gas 


/// @notice helper for deposit to YieldBox, add collateral to a market, borrom from the 
same market and withdraw 


/// @dev all operations are optional: 


IlI - if ‘deposit’ is false it will skip the deposit to YieldBox step 
III - if ‘withdraw’ is false it will skip the withdraw step 

III - if `collateralAmount == O° it will skip the add collateral step 
III - if `borrowAmount == 0° it will skip the borrow step 


/// -the amount deposited to YieldBox is `collateralAamount` 
/// @param market the SGL/BigBang market 
/// @param user the user to perform the action for 
/// @param collateralAmount the collateral amount to add 
[I| @param borrowAmount the borrow amount 
/// @param extractFromSender extracts collateral tokens from sender or from the user 
/// @param deposit true/false flag for the deposit to YieldBox step 
/// @param withdrawParams necessary data for the same chain or the cross-chain 
withdrawal 
function depositAddCollateralAndBorrowFromMarket( 
IMarket market, 
address user, 
uint256 collateralAmount, 
uint256 borrowAmount, 
bool extractFromSender, 
bool deposit, 
ICommonData.IWithdrawParams calldata withdrawParams 
) external payable { 


_executeModule( 


Module.Market, 
abi.encodeWithSelector( 
MagnetarMarketModule 
.depositAddCollateralAndBorrowFromMarket 
selector, 
market, 
user, 
collateralAmount, 
borrowAmount, 
extractFromSender, 
deposit, 


withdrawParams 


/// @notice helper for deposit asset to YieldBox, repay on a market, remove collateral and 
withdraw 


/// @dev all steps are optional: 


Ill - if `depositAmount` is 0, the deposit to YieldBox step is skipped 
Ill - if `repayAmount` is 0, the repay step is skipped 
/// - if “collateralAmount® is 0, the add collateral step is skipped 


/// @param market the SGL/BigBang market 
/// @param user the user to perform the action for 
/// @param depositAmount the amount to deposit to YieldBox 


/// @param repayAmount the amount to repay to the market 


/// @param collateralAmount the amount to withdraw from the market 
/// @param extractFromSender extracts collateral tokens from sender or from the user 
/// @param withdrawCollateralParams withdraw specific params 
function depositRepayAndRemoveCollateralFromMarket( 
address market, 
address user, 
uint256 depositAmount, 
uint256 repayAmount, 
uint256 collateralAmount, 
bool extractFromSender, 
ICommonData.IWithdrawParams calldata withdrawCollateralParams 
) external payable { 
_executeModule( 
Module.Market, 
abi.encodeWithSelector( 
MagnetarMarketModule 
.depositRepayAndRemoveCollateralFromMarket 
selector, 
market, 
user, 
depositAmount, 
repayAmount, 
collateralAmount, 
extractFromSender, 


withdrawCollateralParams 


/// @notice helper to deposit mint from BB, lend on SGL, lock on tOLP and participate on 
tOB 

/// @dev all steps are optional: 

/// - if “mintData.mint is false, the mint operation on BB is skipped 

IH - add BB collateral to YB, add collateral on BB and borrow from BB are part of 


the mint operation 


III - if `depositData.deposit` is false, the asset deposit to YB is skipped 
Ill - if ` lendAmount == 0` the addAsset operation on SGL is skipped 
/// - if `mintData.mint` is true, `lendAmount` will be automatically filled with the 


minted value 
IIl - if `lockData.lock` is false, the tOLP lock operation is skipped 
Ill - if ` participateData.participate` is false, the tOB participate operation is skipped 
/// @param user the user to perform the operation for 
/// @param lendAmount the amount to lend on SGL 
/// @param mintData the data needed to mint on BB 
[I| @param depositData the data needed for asset deposit on YieldBox 
/// @param lockData the data needed to lock on TapiocaOptionLiquidityProvision 
/// @param participateData the data needed to perform a participate operation on 
TapiocaOptionsBroker 
/// @param externalContracts the contracts' addresses used in all the operations 
performed by the helper 
function mintFromBBAndLendOnSGL( 


address user, 


uint256 lendAmount, 
IUSDOBase.IMintData calldata mintData, 
ICommonData.IDepositData calldata depositData, 
ITapiocaOptionLiquidityProvision.lOptionsLockData calldata lockData, 
ITapiocaOptionsBroker.l|OptionsParticipateData calldata participateData, 
ICommonData.ICommoneExternalContracts calldata externalContracts 
) external payable { 
_executeModule( 
Module.Market, 
abi.encodeWithSelector( 
MagnetarMarketModule.mintFromBBAndLendOnSGL.selector, 
user, 
lendAmount, 
mintData, 
depositData, 
lockData, 
participateData, 


externalContracts 


/// @notice helper to exit from tOB, unlock from tOLP, remove from SGL, repay on BB, 
remove collateral from BB and withdraw 
/// @dev all steps are optional: 


III - if ` removeAndRepayData.exitData.exit is false, the exit operation is skipped 


I/II - if `removeAndRepayData.unlockData.unlock` is false, the unlock operation is 
skipped 
III - if `removeAndRepayData.removeAssetFromSGL` is false, the removeAsset 
operation is skipped 
III - if `!removeAndRepayData.assetWithdrawData.withdraw && 
removeAndRepayData.repayAssetOnBB`, the repay operation is performed 
III - if `removeAndRepayData.removeCollateralFromBB` is false, the rmeove 
collateral is skipped 
III - the helper can either stop at the remove asset from SGL step or it can continue 
until is removes & withdraws collateral from BB 
III - removed asset can be withdrawn by providing 
`removeAndRepayData.assetWithdrawData` 
IIl - BB collateral can be removed by providing 
`removeAndRepayData.collateralWithdrawData` 
function exitPositionAndRemoveCollateral( 
address user, 
ICommonData.ICommoneExternalContracts calldata externalData, 
IUSDOBase.IRemoveAndRepay calldata removeAndRepayData 
) external payable { 
_executeModule( 
Module.Market, 
abi.encodeWithSelector( 
MagnetarMarketModule.exitPositionAndRemoveCollateral.selector, 
user, 
externalData, 


removeAndRepayData 


// *** PRIVATE METHODS *** // 

function commontInfo( 
address who, 
IMarket market 

) private view returns (MarketInfo memory) { 
Rebase memory _totalBorrowed; 


MarketInfo memory info; 


info.collateral = market.collateral(); 

info.asset = market.asset(); 

info.oracle = lOracle(market.oracle()); 

info.oracleData = market.oracleData(); 
info.totalCollateralShare = market.totalCollateralShare(); 


info.userCollateralShare = market.userCollateralShare(who); 


(uint128 totalBorrowElastic, uintl28 totalBorrowBase) = market 
.totalBorrow(); 

_totalBorrowed = Rebase(totalBorrowElastic, totalBorrowBase); 

info.totalBorrow = _totalBorrowed; 


info.userBorrowPart = market.userBorrowPart(who); 


info.currentExchangeRate = market.exchangeRate(); 

(, info.oracleExchangeRate) = lOracle(market.oracle()).peek( 
market.oracleData() 

); 

info.sootExchangeRate = IOracle(market.oracle()).peekSpot( 
market.oracleData() 

); 

info.totalBorrowCap = market.totalBorrowCap(); 

info.assetid = market.assetld(); 


info.collateralld = market.collateralld(); 


lYieldBoxBase yieldBox = lYieldBoxBase(market.yieldBox()); 


info.totalYieldBoxCollateralShare, 
info.totalYieldBoxCollateralAmount 
) = yieldBox.assetTotals(info.collateralld); 
(info.totalYieldBoxAssetShare, info.totalYieldBoxAssetAmount) = yieldBox 


.assetl otals(info.assetld); 


info.yieldBoxCollateralTokenType, 
info.yieldBoxCollateralContractAddress, 
info.yieldBoxCollateralStrategyAddress, 


info.yieldBoxCollateralTokenld 


) = yieldBox.assets(info.collateralld); 

( 
info.yieldBoxAssetTokenType, 
info.yieldBoxAssetContractAddress, 
info.yieldBoxAssetStrategyAddress, 
info.yieldBoxAssetTokenld 


) = yieldBox.assets(info.assetld); 


return info; 


function _singularityMarketInfo( 
address who, 
ISingularity[] memory markets 

) private view returns (Singularitylnfo[] memory) { 
uint256 len = markets.length; 


SingularityInfo[] memory result = new SingularityInfo[](len); 


Rebase memory _totalAsset; 


for (uint256 i = 0; i < len; i++) { 


ISingularity sgl = markets[i]; 


result[i]. market = _commontnfo(who, IMarket(address(sg]I))); 


(uintl28 totalAssetElastic, uintl28 totalAssetBase) = sgl // 


.totalAsset(); // 


_totalAsset = Rebase(totalAssetElastic, totalAssetBase); // 
result[i].totalAsset = totalAsset; // 


result[i].userAssetFraction = sgl.balanceOf(who); // 


ISingularity.AccrueInfo memory _accruelnfo, 
uint256 _utilization 


) = sgl.getInterestDetails(); 


result[i].accruelnfo = _accruelnfo; 


result[i].utilization = _utilization; 


return result; 


function _bigBangMarketInfo( 
address who, 
IBigBang[] memory markets 

) private view returns (BigBangInfo[] memory) { 
uint256 len = markets.length; 


BigBangInfo[] memory result = new BigBangInfo[](len); 


IBigBang.Accruelnfo memory _accruelnfo; 
for (uint256 i = 0; i < len; i++) { 


IBigBang bigBang = markets[i]; 


result[i]. market = _commontnfo(who, IMarket(address(bigBang))); 


(uint64 debtRate, uint64 lastAccrued) = bigBang.accruelnfo(); 

_accruelnfo = IBigBang.Accruelnfo(debtRate, lastAccrued); 

result[i].accruelnfo = _accruelnfo; 

result[i].minDebtRate = bigBang.minDebtRate(); 

result[i].maxDebtRate = bigBang.maxDebtRate(); 

result[i].debtRateAgainstEthMarket = bigBang 
.debtRateAgainstEthMarket(); 


result[i].currentDebtRate = bigBang.getDebtRate(); 


IPenrose penrose = |IPenrose(bigBang.penrose()); 
result[i].mainBBMarket = penrose.bigBangEthMarket(); 


result[i].mainBBDebtRate = penrose.bigBangEthDebtRate(); 


return result; 


function _permit( 
address target, 
bytes calldata actionCalldata, 
bool permitAll, 
bool allowFailure 
) private { 


if (permitAll) { 


PermitAllData memory permitData = abi.decode( 
actionCalldata[4:], 
(PermitAllData) 

); 

_checkSender(permitData.owner); 

} else { 

PermitData memory permitData = abi.decode( 
actionCalldata[4:], 
(PermitData) 

); 


_checkSender(permitData.owner); 


(bool success, bytes memory returnData) = target.call(actionCalldata); 
if (Isuccess && !allowFailure) { 


_getRevertMsg(returnData); 


function _extractModule(Module _module) private view returns (address) { 
address module; 
if (module == Module.Market) { 


module = address(marketModule); 


if (module == address(0)) { 


revert("MagnetarV2: module not found"); 


return module; 


function executeModule( 
Module module, 
bytes memory data 

) private returns (bytes memory returnData) { 
bool success = true; 


address module = _extractModule(_module); 


(success, returnData) = module.delegatecall(_ data); 
if (success) { 


_getRevertMsg(returnData); 


function getRevertMsg(bytes memory _returnData) private pure { 
// \f the _res length is less than 68, then 
// the transaction failed with custom error or silently (without a revert message) 


if (_returnData.length < 68) revert("MagnetarV2: Reason unknown"); 


assembly { 


// Slice the sighash. 


_returnData := add(_returnData, 0x04) 


} 


revert(abi.decode(_returnData, (string))); // All that remains is the revert string 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\Magnetar/MagnetarV2Storage. 
sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity ^0.8.18; 


//Boring 


import "@boringcrypto/boring-solidity/contracts/libraries/BoringRebase.sol"; 


/[TAPIOCA 

import "../interfaces/lOracle.sol"; 

import "../interfaces/ISingularity.sol"; 

import "../interfaces/IBigBang.sol"; 

import "../interfaces/ITapiocaOFT.sol"; 

import "../interfaces/ISwapper.sol"; 

import "../interfaces/ITapiocaOptionsBroker.sol"; 

import "../interfaces/ITapiocaOptionLiquidityProvision.sol"; 
import "../interfaces/IPenrose.sol"; 


import "../interfaces/ITapiocaOptionsBroker.sol"; 


import {IUSDOBase} from "../interfaces/IUSDO.sol"; 


//YIELDBOX 


import "tapioca-sdk/dist/contracts/YieldBox/contracts/enums/YieldBoxTokenType.sol"; 


/// @title Magnetar storage module 


/// @notice Magnetar storage 


contract MagnetarV2Storage { 


mapping(address => mapping(address => bool)) public isApprovedForAll; 


struct Marketinfo { 
address collateral; 
uint256 collateralld; 
address asset; 
uint256 assetld; 
lOracle oracle; 
bytes oracleData; 
uint256 totalCollateralShare; 
uint256 userCollateralShare; 
Rebase totalBorrow; 
uint256 userBorrowPart; 
uint256 currentExchangeRate; 
uint256 spotExchangeRate; 
uint256 oracleExchangeRate; 
uint256 totalBorrowCap; 
uint256 totalYieldBoxCollateralShare; 
uint256 totalYieldBoxCollateralAmount; 
uint256 totalYieldBoxAssetShare; 
uint256 totalYieldBoxAssetAmount; 


TokenType yieldBoxCollateralTokenType; 


} 


address yieldBoxCollateralContractAddress; 
address yieldBoxCollateralStrategyAddress; 
uint256 yieldBoxCollateralTokenld; 
TokenType yieldBoxAssetTokenType; 
address yieldBoxAssetContractAddress; 
address yieldBoxAssetStrategyAddress; 


uint256 yieldBoxAssetTokenld; 


struct SingularityInfo { 


} 


MarketInfo market; 

Rebase totalAsset; 

uint256 userAssetFraction; 
ISingularity.Accruelnfo accruelnfo; 


uint256 utilization; 


struct BigBanglnfo { 


MarketInfo market; 
IBigBang.AccruelInfo accruelnfo; 
uint256 minDebtRate; 

uint256 maxDebtRate; 

uint256 debtRateAgainstEthMarket; 
address mainBBMarket; 

uint256 mainBBDebtRate; 


uint256 currentDebtRate; 


// --- ACTIONS DATA ---- 
struct Call { 
uint16 id; 
address target; 
uint256 value; 
bool allowFailure; 


bytes call; 


struct Result { 
bool success; 


bytes returnData; 


struct PermitData { 
address owner; 
address spender; 
uint256 value; 
uint256 deadline; 
uint8 v; 
bytes32 r; 


bytes32 s; 


struct PermitAllIData { 


address owner; 


address spender; 
uint256 deadline; 
uint8 v; 

bytes32 r; 


bytes32 s; 


struct WrapData { 
address from; 
address to; 


uint256 amount; 


struct WrapNativeData { 


address to; 


struct TOFTSendAndBorrowData { 
address from; 
address to; 
uint16 IzDstChainld; 
bytes airdropAdapterParams; 
ITapiocaOFT.IBorrowParams borrowParams; 
ICommonData.IWithdrawParams withdrawParams; 
ICommonData.ISendOptions options; 


ICommonData.lApproval[] approvals; 


struct TOFTSendAndLendData { 
address from; 
address to; 
uint16 IzDstChainld; 
IUSDOBase.ILendOrRepayParams lendParams; 
ICommonData.ISendOptions options; 


ICommonData.lApproval[] approvals; 


struct TOFTSendToStrategyData { 
address from; 
address to; 
uint256 amount; 
uint256 share; 
uint256 assetld; 
uint16 IzDstChainld; 


ICommonData.ISendOptions options; 


struct TOFTRetrieveFromStrategyData { 
address from; 
uint256 amount; 
uint256 share; 


uint256 assetld; 


uint16 IzDstChainld; 
address zroPaymentAddress; 


bytes airdropAdapterParam; 


struct YieldBoxDepositData { 
uint256 assetld; 
address from; 
address to; 
uint256 amount; 


uint256 share; 


struct SGLAddCollateralData { 
address from; 
address to; 
bool skim; 
uint256 amount; 


uint256 share; 


struct SGLBorrowData { 
address from; 
address to; 


uint256 amount; 


struct SGLLendData { 
address from; 
address to; 
bool skim; 


uint256 share; 


struct SGLRepayData { 
address from; 
address to; 
bool skim; 


uint256 part; 


struct HelperRemoveAssetData { 
address market; 
address user; 


uint256 fraction; 


struct HelperLendData { 
address user; 
uint256 lendAmount; 
IUSDOBase.IMintData mintData; 


ICommonData.!|DepositData depositData; 


ITapiocaOptionLiquidityProvision.lOptionsLockData lockData; 
ITapiocaOptionsBroker.|OptionsParticipateData participateData; 


ICommonData.|CommonExternalContracts externalContracts; 


struct HelperBorrowData { 
address market; 
address user; 
uint256 collateralAmount; 
uint256 borrowAmount; 
bool extractFromSender; 
bool deposit; 
bool withdraw; 


bytes withdrawData; 


struct HelperDepositRepayRemoveCollateral { 
address market; 
address user; 
uint256 depositAmount; 
uint256 repayAmount; 
uint256 collateralAmount; 
bool extractFromSender; 


ICommonData.IWithdrawParams withdrawCollateralParams; 


struct HelperBuyCollateral { 
address market; 
address from; 
uint256 borrowAmount; 
uint256 supplyAmount; 
uint256 minAmountOut; 
ISwapper swapper; 


bytes dexData; 


struct HelperSellCollateral { 
address market; 
address from; 
uint256 share; 
uint256 minAmountOut; 
ISwapper swapper; 


bytes dexData; 


struct HelperExerciseOption { 
ITapiocaOptionsBrokerCrossChain.lExerciseOptionsData optionsData; 
ITapiocaOptionsBrokerCrossChain.lExerciseLZData |zData; 
ITapiocaOptionsBrokerCrossChain.lExerciseLZSendTapData tapSendData; 


ICommonData.lApproval[] approvals; 


struct HelperMultiHopBuy { 
address from; 
uint256 collateralAmount; 
uint256 borrowAmount; 
IUSDOBase.|LeverageSwapData swapData; 
IUSDOBase.|LeverageLZData |zData; 
IUSDOBase.ILeverageExternalContractsData externalData; 
bytes airdropAdapterParams; 


ICommonData.lApproval[] approvals; 


struct HelperMultiHopSell { 
address from; 
uint256 share; 
IUSDOBase.|LeverageSwapData swapData; 
IUSDOBase.|LeverageLZData |zData; 
IUSDOBase.ILeverageExternalContractsData externalData; 
bytes airdropAdapterParams; 


ICommonData.lApproval[] approvals; 


struct HelperMarketRemoveAndRepayAsset { 
address user; 
ICommonData.|CommonExternalContracts externalData; 


IUSDOBase.IRemoveAndRepay removeAndRepayData; 


struct HelperTOFTRemoveAndRepayAsset { 
address from; 
address to; 
uint16 IzDstChainld; 
address zroPaymentAddress; 
bytes adapterParams; 
ICommonData.ICommoneExternalContracts externalData; 
IUSDOBase.IRemoveAndRepay removeAndRepayData; 


ICommonData.lApproval[] approvals; 


// --- ACTIONS IDS ---- 
uintl6 internal constant PERMIT ALL = 1; 


uint16 internal constant PERMIT = 2; 


uint16 internal constant YB_DEPOSIT_ASSET = 100; 


uintl6 internal constant YB_WITHDRAW_TO = 102; 


uintl6 internal constant MARKET _ADD_COLLATERAL = 200; 

uint16 internal constant MARKET BORROW = 201; 

uint16 internal constant MARKET _LEND = 203; 

uintl6 internal constant MARKET_REPAY = 204; 

uintl6 internal constant MARKET _YBDEPOSIT_AND_LEND = 205; 

uintl6 internal constant MARKET _YBDEPOSIT_COLLATERAL_AND_BORROW = 206; 


uintl6 internal constant MARKET _REMOVE_ASSET = 207; 


uintl6 internal constant MARKET DEPOSIT _REPAY_REMOVE_COLLATERAL = 208; 
uintl6 internal constant MARKET _BUY_COLLATERAL = 209; 

uintl6 internal constant MARKET _SELL_COLLATERAL = 210; 

uintl6 internal constant MARKET _MULTIHOP_BUY = 211; 


uint16 internal constant MARKET _MULTIHOP_SELL = 212; 


uintl6 internal constant TOFT_WRAP = 300; 

uint16 internal constant TOFT SEND _FROM = 301; 

uintl6 internal constant TOFT_SEND_APPROVAL = 302; 

uint16 internal constant TOFT SEND _AND_ BORROW = 303; 
uintl6 internal constant TOFT_SEND_AND_LEND = 304; 

uintl6 internal constant TOFT_DEPOSIT_TO_ STRATEGY = 305; 
uintl6 internal constant TOFT_RETRIEVE_FROM_ STRATEGY = 306; 


uintl6 internal constant TOFT_REMOVE_AND_REPAY = 307; 


uintl6 internal constant TAP_EXERCISE OPTION = 400; 


[1 *** EVENTS *** // 


event ApprovalForAll(address owner, address operator, bool approved); 


// *** INTERNAL METHODS *** // 


function checkSender(address from) internal view { 


require(_ from == msg.sender, "MagnetarV2: operator not approved"); 


receive() external payable virtual {} 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\Magnetar\modules/MagnetarM 
arketModule.sol---- 
// SPDX-License-lIdentifier: UNLICENSED 


pragma solidity *0.8.18; 


HLZ 


import "tapioca-sdk/dist/contracts/libraries/LZLib.sol"; 


//0Z 
import "@openzeppelin/contracts/utils/introspection/IERC165.sol"; 
import "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol"; 


import "@openzeppelin/contracts/token/ERC721/IERC721.sol"; 


/[TAPIOCA 
import "../../interfaces/lYieldBoxBase.sol"; 


import "../../interfaces/ITapiocaOptions.sol"; 


import "../MagnetarV2Storage.sol"; 


/// @title Magnetar market module 
/// @notice Magnetar module for Singularity & BigBang type actions 
contract MagnetarMarketModule is MagnetarV2Storage { 

using SafeERC20 for IERC20; 


using RebaseLibrary for Rebase; 


function withdrawToChain( 


lYieldBoxBase yieldBox, 
address from, 
uint256 assetld, 
uint16 dstChainld, 
bytes32 receiver, 
uint256 amount, 
uint256 share, 
bytes memory adapterParams, 
address payable refundAddress, 
uint256 gas 
) external payable { 
_withdrawToChain( 
yieldBox, 
from, 
assetld, 
dstChainld, 
receiver, 
amount, 
share, 
adapterParams, 
refundAddress, 


gas 


function depositAddCollateralAndBorrowFromMarket( 


IMarket market, 
address user, 
uint256 collateralAmount, 
uint256 borrowAmount, 
bool extractFromSender, 
bool deposit, 
ICommonData.IWithdrawParams calldata withdrawParams 
) external payable { 
_depositAddCollateralAndBorrowFromMarket( 
market, 
user, 
collateralAmount, 
borrowAmount, 
extractFromSender, 
deposit, 


withdrawParams 


function depositRepayAndRemoveCollateralFromMarket( 
address market, 
address user, 
uint256 depositAmount, 
uint256 repayAmount, 
uint256 collateralAmount, 


bool extractFromSender, 


ICommonData.IWithdrawParams calldata withdrawCollateralParams 
) external payable { 
_depositRepayAndRemoveCollateralFromMarket( 
market, 
user, 
depositAmount, 
repayAmount, 
collateralAmount, 
extractFromSender, 


withdrawCollateralParams 


function mintFromBBAndLendOnSGL( 
address user, 
uint256 lendAmount, 
IUSDOBase.IMintData calldata mintData, 
ICommonData.!IDepositData calldata depositData, 
ITapiocaOptionLiquidityProvision.lOptionsLockData calldata lockData, 
ITapiocaOptionsBroker.l|OptionsParticipateData calldata participateData, 
ICommonData.ICommoneExternalContracts calldata externalContracts 
) external payable { 
_mintFromBBAndLendOnSGL( 
user, 
lendAmount, 


mintData, 


depositData, 
lockData, 
participateData, 


externalContracts 


function exitPositionAndRemoveCollateral( 
address user, 
ICommonData.ICommoneExternalContracts calldata externalData, 
IUSDOBase.IRemoveAndRepay calldata removeAndRepayData 
) external payable { 
_exitPositionAndRemoveCollateral( 
user, 
externalData, 


removeAndRepayData 


// *** PRIVATE METHODS *** // 

function depositAddCollateralAndBorrowFromMarket( 
IMarket market, 
address user, 


uint256 collateralAmount, 


uint256 borrowAmount, 

bool extractFromSender, 

bool deposit, 

ICommonData.IWithdrawParams calldata withdrawParams 
) private { 


lYieldBoxBase yieldBox = lYieldBoxBase(market.yieldBox()); 


uint256 collateralld = market.collateralld(); 


(, address collateralAddress, , ) = yieldBox.assets(collateralld); 


uint256 share = yieldBox.toShare( 
collateralld, 
collateralAmount, 
false 
); 
//deposit to YieldBox 
if (deposit) { 
if ('extractFromSender) { 
_checkSender(user); 
} 
// transfers tokens from sender or from the user to this contract 
_extractTokens( 
extractFromSender ? msg.sender : user, 
collateralAddress, 


collateralAmount 


// deposit to YieldBox 
IERC20(collateralAddress).approve( 
address(yieldBox), 
collateralAmount 
); 
yieldBox.depositAsset( 
collateralld, 
address(this), 


address(this), 


// performs .addCollateral on market 
if (collateralAmount > 0) { 
_setApprovalForYieldBox(address(market), yieldBox); 
market.addCollateral( 
deposit ? address(this) : user, 
user, 
false, 
collateralAmount, 


_share 


// performs .borrow on market 
// if `withdraw` it uses ‘“withdrawTo to withdraw assets on the same chain or to 
another one 
if (borrowAmount > 0) { 
address borrowReceiver = withdrawParams.withdraw 
? address(this) 
: USEF; 


market.borrow(user, borrowReceiver, borrowAmount); 


if (withdrawParams.withdraw) { 

bytes memory withdrawAssetBytes = abi.encode( 
withdrawParams.withdrawOnOtherChain, 
withdrawParams.withdrawLzChainld, 
LzLib.addressToBytes32(user), 
withdrawParams.withdrawAdapterParams 

); 

_withdraw( 
borrowReceiver, 
withdrawAssetBytes, 
market, 
yieldBox, 
borrowAmount, 
O, 


false 


_revertYieldBoxApproval(address(market), yieldBox); 


function depositRepayAndRemoveCollateralFromMarket( 

address market, 

address user, 

uint256 depositAmount, 

uint256 repayAmount, 

uint256 collateralAmount, 

bool extractFromSender, 

ICommonData.IWithdrawParams calldata withdrawCollateralParams 
) private { 

IMarket marketinterface = IMarket(market); 


lYieldBoxBase yieldBox = lYieldBoxBase(marketInterface.yieldBox()); 


uint256 assetid = marketinterface.assetld(); 


(, address assetAddress, , ) = yieldBox.assets(assetld); 


// deposit to YieldBox 
if (depositAmount > 0) { 
_extractTokens( 
extractFromSender ? msg.sender : user, 


assetAdadress, 


depositAmount 
); 
IERC20(assetAddress).approve(address(yieldBox), depositAmount); 
yieldBox.depositAsset( 

assetld, 

address(this), 

address(this), 

depositAmount, 


0 


// performs a repay operation for the specified market 
if (repayAmount > 0) { 
_setApprovalForYieldBox(market, yieldBox); 
marketInterface.repay( 
depositAmount > 0 ? address(this) : user, 
user, 
false, 
repayAmount 
); 


_revertYieldBoxApproval(market, yieldBox); 


// performs a removeCollateral operation on the market 


// if ~withdrawCollateralParams.withdraw’ it uses “withdrawTo to withdraw collateral 


on the same chain or to another one 
if (collateralAmount > 0) { 

address collateralWithdrawReceiver = withdrawCollateralParams 
.withdraw 
? address(this) 
: USET; 

uint256 collateralShare = yieldBox.toShare( 
marketIinterface.collateralld(), 
collateralAmount, 
false 

); 

marketInterface.removeCollateral( 
user, 
collateralWithdrawReceiver, 


collateralShare 


//withdraw 
if (withdrawCollateralParams.withdraw) { 
_withdrawToChain( 

yieldBox, 
collateralWithdrawReceiver, 
marketInterface.collateralld(), 
withdrawCollateralParams.withdrawLzChainld, 
LzLib.addressToBytes32(user), 


collateralAmount, 


collateralShare, 
withdrawCollateralParams.withdrawAdapterParams, 
payable(this), 


address(this).balance 


function _mintFromBBAndLendOnSGL( 
address user, 
uint256 lendAmount, 
IUSDOBase.IMintData calldata mintData, 
ICommonData.!DepositData calldata depositData, 
ITapiocaOptionLiquidityProvision.l|OptionsLockData calldata lockData, 
ITapiocaOptionsBroker.l|OptionsParticipateData calldata participateData, 
ICommonData.ICommoneExternalContracts calldata externalContracts 
) private { 
IMarket bigBang = IMarket(externalContracts.bigBang); 
ISingularity singularity = ISingularity(externalContracts.singularity); 


lYieldBoxBase yieldBox = lYieldBoxBase(singularity.yieldBox()); 


if (address(singularity) != address(0O)) { 
_setApprovalForYieldBox(address(singularity), yieldBox); 

} 

if (address(bigBang) != address(0)) { 


_setApprovalForYieldBox(address(bigBang), yieldBox); 


// if mint’ was requested the following actions are performed: 
// - extracts & deposits collateral to YB 
// - performs bigBang.addCollateral 
// - performs bigBang.borrow 
if (mintData.mint) { 
uint256 bbCollateralld = bigBang.collateralld(); 
(, address bbCollateralAddress, , ) = yieldBox.assets( 
bbCollateralld 
); 
uint256 bbCollateralShare = yieldBox.toShare( 
bbCollateralld, 
mintData.collateralDepositData.amount, 
false 
); 
// deposit collateral to YB 
if (mintData.collateralDepositData.deposit) { 
if (!mintData.collateralDepositData.extractFromSender) { 
_checkSender(user); 
} 
_extractTokens( 
mintData.collateralDepositData.extractFromSender 
? msg.sender 


: user, 


bbCollateralAddress, 


mintData.collateralDepositData.amount 


IERC20(bbCollateralAddress).approve( 
address(yieldBox), 
mintData.collateralDepositData.amount 

); 

yieldBox.depositAsset( 
bbCollateralld, 
address(this), 
address(this), 

O, 


bbCollateralShare 


// add collateral to BB 
if (mintData.collateralDepositData.amount > 0) { 
//add collateral to BingBang 
_setApprovalForYieldBox(address(bigBang), yieldBox); 
bigBang.addCollateral( 
mintData.collateralDepositData.deposit 
? address(this) 
: user, 


user, 


false, 
mintData.collateralDepositData.amount, 


bbCollateralShare 


// mints from BB 


bigBang.borrow(user, user, mintData.mintAmount); 


// if “depositData.deposit’: 
//  - deposit SGL asset to YB for “user” 
uint256 sglAssetld = singularity.assetld(); 
(, address sglAssetAddress, , ) = yieldBox.assets(sglAssetld); 
if (depositData.deposit) { 
if (!\depositData.extractFromSender) { 


_checkSender(user); 


_extractTokens( 
depositData.extractFromSender ? msg.sender : user, 
sglAssetAddress, 


depositData.amount 


IERC20(sglAssetAddress).approve( 


address(yieldBox), 

depositData.amount 
); 
yieldBox.depositAsset( 

sglAssetld, 

address(this), 

user, 

O, 


yieldBox.toShare(sglAssetid, depositData.amount, false) 


// if “lendAmount’ > 0: 
// - add asset to SGL 
uint256 fraction = 0; 
if (lendAmount == 0 && depositData.deposit) { 
lendAmount = depositData.amount; 
} 
if (lendAmount > 0) { 
uint256 lendShare = yieldBox.toShare(sglAssetld, lendAmount, false); 


fraction = singularity.addAsset(user, user, false, lendShare); 


// if “lockData.lock’: 
// - transfer ‘fraction’ from user to ‘address(this) 


//  - deposits “fraction” to YB for ‘address(this)° 


// - performs tOLP.lock 
uint256 tOLPTokenld = 0; 
if (lockData.lock) { 
if (lockData.fraction > 0) { 
fraction = lockData.fraction; 
} 
// retrieve and deposit SGLAssetld registered in tOLP 
(uint256 tOLPSglAssetld, , ) = ITapiocaOptionLiquidityProvision( 
lockData.target 
).activeSingularities(address(singularity)); 
IERC20(address(singularity)).safeTransferFrom( 
user, 
address(this), 
fraction 
); 
IERC20(address(singularity)).approve(address(yieldBox), fraction); 
yieldBox.depositAsset( 
tOLPSglAssetld, 
address(this), 
address(this), 
fraction, 


0 


_setApprovalForYieldBox(lockData.target, yieldBox); 


address lockTo = participateData.participate ? address(this) : user; 


tOLPTokenld = ITapiocaOptionLiquidityProvision(lockData.target) 
lock( 
lockTo, 
address(singularity), 
lockData.lockDuration, 
lockData.amount 
); 


_revertYieldBoxApproval(lockData.target, yieldBox); 


// if ~participateData.participate : 
// - verify tOLPTokenld 
// - performs tOB.participate 
// -transfer “oTAPTokenld* to user 
if (participateData.participate) { 
if (participateData.tOLPTokenld != 0) { 
if (tOLPTokenld != 0) { 
require( 
participateData.tOLPTokenld == tOLPTokenld, 


"Magnetar: tOLPTokenld mismatch" 


tOLPTokenld = participateData.tOLPTokenld; 


} 


require( 


lockData.target != address(0), 
"Magnetar: lock target mismatch" 
); 
require(tOLPTokenld != 0, "Magnetar: tOLPTokenld 0"); 
IERC721(lockData.target).approve( 
participateData.target, 
tOLPTokenld 
); 
uint256 oTAPTokenld = ITapiocaOptionsBroker(participateData.target) 


.participate(tOLPTokenld); 


address oTapAddress = ITapiocaOptionsBroker(participateData.target) 
.OTAP(); 
IERC721(oTapAddress).approve(address(this), oTAPTokenld); 
IERC721(oTapAddress).safeTransferFrom( 
address(this), 
user, 
oTAPTokenld, 


"0x" 


if (address(singularity) != address(0)) { 
_revertYieldBoxApproval(address(singularity), yieldBox); 
} 


if (address(bigBang) != address(0)) { 


_revertYieldBoxApproval(address(bigBang), yieldBox); 


function _exitPositionAndRemoveCollateral( 
address user, 
ICommonData.ICommoneExternalContracts calldata externalData, 
IUSDOBase.IRemoveAndRepay calldata removeAndRepayData 
) private { 
IMarket bigBang = IMarket(externalData.bigBang); 
ISingularity singularity = ISingularity(externalData.singularity); 


lYieldBoxBase yieldBox = lYieldBoxBase(singularity.yieldBox()); 


// if *\removeAndRepayData.exitData.exit” the following operations are performed 
// - if ownerOfTapTokenld is user, transfers the oTAP token id to this contract 
//  - tOB.exitPosition 
// - if “!removeAndRepayData.unlockData.unlock’, transfer the obtained tokenld to 
the user 
uint256 tOLPld = 0; 
if (removeAndRepayData.exitData.exit) { 
require( 
removeAndRepayData.exitData.oTAPTokenlID > 0, 


"Magnetar: oTAPTokenlD 0" 


address oTapAddress = ITapiocaOptionsBroker( 


removeAndRepayData.exitData.target 

).oTAP(); 

(, ITapiocaOptions. TapOption memory oTAPPosition) = ITapiocaOptions( 
oTapAddress 


).attributes(removeAndRepayData.exitData.oTAPTokenID); 


tOLPld = oTAPPosition.tOLP; 


address ownerOfTapTokenld = IERC721(oTapAddress).ownerOf( 
removeAndRepayData.exitData.oTAPTokenID 
); 
require( 
ownerOfTapTokenld == user || ownerOffapTokenld == address(this), 
"Magnetar: oTAPTokenID owner mismatch" 
); 
if (ownerOfTapTokenld == user) { 
IERC721(oTapAddress).safeTransferFrom( 
user, 
address(this), 
removeAndRepayData.exitData.oTAPTokenlID, 


"Ox" 


} 
ITapiocaOptionsBroker(removeAndRepayData.exitData.target) 


.exitPosition(removeAndRepayData.exitData.oTAPTokenID); 


if (!removeAndRepayData.unlockData.unlock) { 
IERC721(oTapAddress).safeTransferFrom( 
address(this), 
user, 
removeAndRepayData.exitData.oTAPTokenID, 


"Qx" 


// performs a tOLP.unlock operation 
if (removeAndRepayData.unlockData.unlock) { 
if (removeAndRepayData.unlockData.tokenld != 0) { 
if (tOLPld != 0) { 
require( 
tOLPld == removeAndRepayData.unlockData.tokenld, 


"Magnetar: tOLPId mismatch" 


} 
tOLPld = removeAndRepayData.unlockData.tokenld; 
} 
ITapiocaOptionLiquidityProvision( 
removeAndRepayData.unlockData.target 


).unlock(tOLPld, externalData.singularity, user); 


// if “\removeAndRepayData.removeAssetFromSGL performs the follow operations: 
// - removeAsset from SGL 
// - if ‘YremoveAndRepayData.assetWithdrawData.withdraw withdraws by using the 
`withdrawTo` operation 
uint256 _removeAmount = 0; 
if (removeAndRepayData.removeAssetFromSGL) { 
_removeAmount = yieldBox.toAmount( 
singularity.assetld(), 
removeAndRepayData.removeShare, 


false 


address removeAssetTo = removeAndRepayData 
.assetWithdrawData 
.withdraw || removeAndRepayData.repayAssetOnBB 
? address(this) 
: uSer; 

uint256 removedShare = singularity.removeAsset( 
user, 
removeAssetTo, 


removeAndRepayData.removeShare 


//withdraw 
if (removeAndRepayData.assetWithdrawData.withdraw) { 


bytes memory withdrawAssetBytes = abi.encode( 


removeAndRepayData.assetWithdrawData.withdrawOnOtherChain, 
removeAndRepayData.assetWithdrawData.withdrawLzChainld, 
LzLib.addressToBytes32(user), 
removeAndRepayData.assetWithdrawData.withdrawAdapterParams 
); 
_withdraw( 
address(this), 
withdrawAssetBytes, 
singularity, 
yieldBox, 
O, 
removedShare, 


true 


// performs a BigBang repay operation 
if ( 
IremoveAndRepayData.assetWithdrawData.withdraw && 
removeAndRepayData.repayAssetOnBB 
){ 
_setApprovalForYieldBox(address(bigBang), yieldBox); 
uint256 repayed = bigBang.repay( 
address(this), 


user, 


false, 
removeAndRepayData.repayAmount 
); 
// transfer excess amount to the user 
if (repayed <_removeAmount) { 
yieldBox.transfer( 
address(this), 
user, 
bigBang.assetld(), 
yieldBox.toShare( 
bigBang.assetld(), 
_removeAmount - repayed, 


false 


// performs a BigBang removeCollateral operation 
// if ~removeAndRepayData.collateralWithdrawData.withdraw withdraws by using the 
`withdrawTo` method 
if (removeAndRepayData.removeCollateralFromBB) { 
address removeCollateralTo = removeAndRepayData 
.collateralWithdrawData 
.withdraw 


? address(this) 


: user; 

bigBang.removeCollateral( 
user, 
removeCollateralTo, 


removeAndRepayData.collateralShare 


//withdraw 
if (removeAndRepayData.collateralWithdrawData.withdraw) { 
bytes memory withdrawCollateralBytes = abi.encode( 
removeAndRepayData 
.collateralWithdrawData 
.withdrawOnOtherChain, 
removeAndRepayData.collateralWithdrawData.withdrawLzChainld, 
LzLib.addressToBytes32(user), 
removeAndRepayData 
.collateralWithdrawData 
.withdrawAdapterParams 
); 
_withdraw( 
address(this), 
withdrawCollateralBytes, 
singularity, 
yieldBox, 
O, 


removeAndRepayData.collateralShare, 


true 


} 


_revertYieldBoxApproval(address(bigBang), yieldBox); 


function _withdrawToChain( 
lYieldBoxBase yieldBox, 
address from, 
uint256 assetld, 
uint16 dstChainld, 
bytes32 receiver, 
uint256 amount, 
uint256 share, 
bytes memory adapterParams, 
address payable refundAddress, 
uint256 gas 
) private { 
// perform a same chain withdrawal 
if (dstChainld == 0) { 
yieldBox.withdraw( 
assetld, 
from, 
LzLib.bytes32ToAddress(receiver), 


amount, 


share 
); 
return; 
} 
// perform a cross chain withdrawal 
(, address asset, , ) = yieldBox.assets(assetld); 
// make sure the asset supports a cross chain operation 
try 
IERC165(address(asset)).supportsInterface( 
type(ISendFrom).interfaceld 
) 
{} catch { 


return; 


// withdraw from YieldBox 


yieldBox.withdraw(assetld, from, address(this), amount, 0); 


// build LZ params 

bytes memory _adapterParams; 

ISendFrom.LzCallParams memory callParams = ISendFrom.LzCallParams({ 
refundAddress: msg.value > 0 ? refundAddress : payable(this), 
zroPaymentAddress: address(0), 
adapterParams: ISendFrom(address(asset)).useCustomAdapterParams() 

? adapterParams 


: adapterParams 


// sends the asset to another layer 
ISendFrom(address(asset)).sendFrom{value: gas }( 
address(this), 
dstChainld, 
receiver, 
amount, 


callParams 


function _withdraw( 
address from, 
bytes memory withdrawData, 
IMarket market, 
lYieldBoxBase yieldBox, 
uint256 amount, 
uint256 share, 
bool withdrawCollateral 
) private { 
require(withdrawData.length > 0, "MagnetarV2: withdrawData is empty"); 
( 
bool withdrawOnOtherChain, 
uint16 destChain, 


bytes32 receiver, 


bytes memory adapterParams 


) = abi.decode(withdrawData, (bool, uintl6, bytes32, bytes)); 


uint256 gas = msg.value > 0 ? msg.value : address(this).balance; 
_withdrawToChain( 

yieldBox, 

from, 

withdrawCollateral ? market.collateralld() : market.assetld(), 

withdrawOnOtherChain ? destChain : 0, 

receiver, 

amount, 

share, 

adapterParams, 

gas > 0 ? payable(msg.sender) : payable(this), 


gas 


function setApprovalForYieldBox( 
address target, 
lYieldBoxBase yieldBox 
) private { 
bool isApproved = yieldBox.isApprovedForAll( 
address(this), 


address(target) 


if (tisApproved) { 


yieldBox.setApprovalForAll(address(target), true); 


function _revertYieldBoxApproval( 
address target, 
lYieldBoxBase yieldBox 
) private { 
bool isApproved = yieldBox.isApprovedForAll( 
address(this), 
address(target) 
); 
if (isApproved) { 


yieldBox.setApprovalForAll(address(target), false); 


function extractTokens( 
address from, 
address token, 
uint256 _amount 

) private { 


IERC20(_token).safeTransferFrom(_from, address(this), amount); 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\Multicall/Multicall3.sol---- 


// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


import "@openzeppelin/contracts/access/Ownable.sol"; 
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/// @title Multicall contract 
/// @notice Multicall used for contracts deployment together with the TapiocaDeployer 
contract 
contract Multicall3 is Ownable { 
struct Call { 
address target; 
bool allowFailure; 


bytes callData; 


struct CallValue { 
address target; 
bool allowFailure; 
uint256 value; 


bytes callData; 


struct Result { 
bool success; 


bytes returnData; 


function multicall( 
Call[] calldata calls 
) public payable returns (Result[] memory returnData) { 
uint256 length = calls.length; 
returnData = new Result[](length); 
Call memory calli; 
for (uint256 i = 0; i < length; ) { 
Result memory result = returnDatal[i]; 


calli = calls[i]; 


(result.success, result.returnData) = calli.target.call( 
calli.callData 

); 

if (!result.success) { 
_getRevertMsg(result.returnData); 

} 

unchecked { 


++i; 


function multicallValue( 
CallValue[] calldata calls 
) public payable returns (Result[] memory returnData) { 
uint256 valAccumulator; 
uint256 length = calls.length; 
returnData = new Result[](length); 
CallValue memory calli; 
for (uint256 i = 0; i < length; ) { 
Result memory result = returnData[i]; 
calli = calls[i]; 
uint256 val = calli.value; 
// Humanity will be a Type V Kardashev Civilization before this overflows - andreas 
// ~ 10*25 Wei in existence << ~ 10%76 size uint fits in a uint256 
unchecked { 
valAccumulator += val; 
} 
(result.success, result.returnData) = calli.target.call{value: val}( 
calli.callData 
); 
if (!result.success) { 
_getRevertMsg(result.returnData); 
} 
unchecked { 


++i; 


} 
// Finally, make sure the msg.value = SUM(call[0...i].value) 


require(msg.value == valAccumulator, "Multicall3: value mismatch"); 


function getRevertMsg(bytes memory _returnData) private pure { 
// \f the _res length is less than 68, then 
// the transaction failed with custom error or silently (without a revert message) 


if (_returnData.length < 68) revert("Reason unknown"); 


assembly { 
// Slice the sighash. 
_returnData := add(_returnData, 0x04) 


} 


revert(abi.decode(_returnData, (string))); // All that remains is the revert string 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\oracle/OracleAbstract.sol---- 


// SPDX-License-Identifier: GPL-3.0 


pragma solidity “0.8.7; 


import "./interfaces/lOracle.sol"; 


/// @title OracleAbstract 
/// @author Angle Core Team 
/// @notice Abstract Oracle contract that contains some of the functions that are used across 
all oracle contracts 
/// @dev This is the most generic form of oracle contract 
/// @dev A rate gives the price of the out-currency with respect to the in-currency in base 
“BASE”. For instance 
/// if the out-currency is ETH worth 1000 USD, then the rate ETH-USD is 10**21 
abstract contract OracleAbstract is lOracle { 
/// @notice Base used for computation 
uint256 public constant BASE = 10 ** 18; 
/// @notice Unit of the in-currency 
uint256 public override inBase; 
/// @notice Description of the assets concerned by the oracle and the price outputted 


bytes32 public description; 


/// @notice Reads one of the rates from the circuits given 
/// @return rate The current rate between the in-currency and out-currency 


/// @dev By default if the oracle involves a Uniswap price and a Chainlink price 


/// this function will return the Uniswap price 
/// @dev The rate returned is expressed with base `BASE` (and not the base of the 
out-currency) 


function read() external view virtual override returns (uint256 rate); 


/// @notice Read rates from the circuit of both Uniswap and Chainlink if there are both 
circuits 
/// else returns twice the same price 
/// @return Return all available rates (Chainlink and Uniswap) with the lowest rate 
returned first. 
//| @dev The rate returned is expressed with base “BASE (and not the base of the 
out-currency) 
function readAll() external view override returns (uint256, uint256) { 


return _readAll(inBase); 


/// @notice Reads rates from the circuit of both Uniswap and Chainlink if there are both 
circuits 

/// and returns either the highest of both rates or the lowest 

/// @return rate The lower rate between Chainlink and Uniswap 

/// @dev If there is only one rate computed in an oracle contract, then the only rate is 
returned 

/// regardless of the value of the ‘lower’ parameter 

/// @dev The rate returned is expressed with base `BASE` (and not the base of the 

out-currency) 


function readLower() external view override returns (uint256 rate) { 


(rate, ) = _readAll(inBase); 


/// @notice Reads rates from the circuit of both Uniswap and Chainlink if there are both 
circuits 

/// and returns either the highest of both rates or the lowest 

/// @return rate The upper rate between Chainlink and Uniswap 

/// @dev If there is only one rate computed in an oracle contract, then the only rate is 
returned 

/// regardless of the value of the ‘lower’ parameter 

//| @dev The rate returned is expressed with base `BASE` (and not the base of the 

out-currency) 

function readUpper() external view override returns (uint256 rate) { 


(, rate) = _readAll(inBase); 


/// @notice Converts an in-currency quote amount to out-currency using one of the rates 
available in the oracle 

/// contract 

/// @param quoteAmount Amount (in the input collateral) to be converted to be converted 
in out-currency 

/// @return Quote amount in out-currency from the base amount in in-currency 

/// @dev Like in the read function, if the oracle involves a Uniswap and a Chainlink price, 
this function 

/// will use the Uniswap price to compute the out quoteAmount 


//| @dev The rate returned is expressed with base `BASE` (and not the base of the 


out-currency) 
function readQuote( 
uint256 quoteAmount 


) external view virtual override returns (uint256); 


/// @notice Returns the lowest quote amount between Uniswap and Chainlink circuits (if 
possible). If the oracle 
/// contract only involves a single feed, then this returns the value of this feed 
/// @param quoteAmount Amount (in the input collateral) to be converted 
/// @return The lowest quote amount from the quote amount in in-currency 
//| @dev The rate returned is expressed with base `BASE` (and not the base of the 
out-currency) 
function readQuoteLower( 
uint256 quoteAmount 
) external view override returns (uint256) { 
(uint256 quoteSmall, ) = _readAll(quoteAmount); 


return quoteSmall; 


/// @notice Returns Uniswap and Chainlink values (with the first one being the smallest 
one) or twice the same value 
/// if just Uniswap or just Chainlink is used 
[I| @param quoteAmount Amount expressed in the in-currency base. 
/// @dev If `quoteAmount` is “inBase’, rates are returned 
/// @return The first return value is the lowest value and the second parameter is the 


highest 


/// @dev The rate returned is expressed with base 
out-currency) 
function _readAll( 
uint256 quoteAmount 


) internal view virtual returns (uint256, uint256) {} 


“BASE (and not the base of the 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\oracle/OracleChainlinkMulti.sol 


// SPDX-License-Identifier: GPL-3.0 


pragma solidity “0.8.7; 


import "./modules/ModuleChainlinkMulti.sol"; 


import "./OracleAbstract.sol"; 


/// @title OracleChainlinkMulti 
/// @author Angle Core Team 
/// @notice Oracle contract, one contract is deployed per collateral/stablecoin pair 
/// @dev This contract concerns an oracle that uses Chainlink with multiple pools to read 
from 
/// @dev It inherits the ~ModuleChainlinkMulti> contract and like all oracle contracts, this 
contract 
/// is an instance of “OracleAstract’ that contains some base functions 
contract OracleChainlinkMulti is OracleAbstract, ModuleChainlinkMulti { 
/// @notice Constructor for an oracle using Chainlink with multiple pools to read from 
/// @param _circuitChainlink Chainlink pool addresses (in order) 
/// @param _circuitChainlsMultiplied Whether we should multiply or divide by this rate 
/// @param _description Description of the assets concerned by the oracle 
constructor( 
address[] memory _circuitChainlink, 
uint8[] memory _circuitChainlsMultiplied, 


uint256 _inBase, 


uint32 stalePeriod, 
address[] memory guardians, 


bytes32 description 


ModuleChainlinkMulti( 
_circuitChainlink, 
_circuitChainlsMultiplied, 
stalePeriod, 


guardians 


inBase = _inBase; 


description = _description; 


/// @notice Reads the rate from the Chainlink circuit 
/// @return rate The current rate between the in-currency and out-currency 
function read() external view override returns (uint256 rate) { 


(rate, ) = _quoteChainlink(BASE); 


/// @notice Converts an in-currency quote amount to out-currency using Chainlink's circuit 
/// @param quoteAmount Amount (in the input collateral) to be converted in out-currency 
/// @return Quote amount in out-currency from the base amount in in-currency 

/// @dev The amount returned is expressed with base `BASE` (and not the base of the 


out-currency) 


function readQuote( 
uint256 quoteAmount 
) external view override returns (uint256) { 


return _readQuote(quoteAmount); 


/// @notice Returns Chainlink quote values twice 
/// @param quoteAmount Amount expressed in the in-currency base. 
/// @dev If quoteAmount is “inBase’, rates are returned 
/// @return The two return values are similar 
//| @dev The amount returned is expressed with base `BASE` (and not the base of the 
out-currency) 
function _readAll( 
uint256 quoteAmount 
) internal view override returns (uint256, uint256) { 
uint256 quote = _readQuote(quoteAmount); 


return (quote, quote); 


/// @notice Internal function to convert an in-currency quote amount to out-currency using 
Chainlink's circuit 
/// @param quoteAmount Amount (in the input collateral) to be converted to be converted 
in out-currency 
/// @dev The amount returned is expressed with base `BASE` (and not the base of the 
out-currency) 


function readQuote(uint256 quoteAmount) internal view returns (uint256) { 


quoteAmount = (quoteAmount * BASE) / inBase; 
(quoteAmount, ) = _quoteChainlink(quoteAmount); 
// We return only rates with base as decimals 


return quoteAmount; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\oracle/OracleChainlinkMultiEffi 
cient.sol---- 


// SPDX-License-Identifier: GPL-3.0 


pragma solidity “0.8.7; 


import "@chainlink/contracts/src/v0.8/interfaces/AggregatorV3Interface.sol"; 


import "./utils/ChainlinkUtils.sol"; 


/// @title OracleChainlinkMultiEfficient 
/// @author Angle Core Team 
/// @notice Abstract contract to build oracle contracts looking at Chainlink feeds on top of 
/// @dev This is contract should be overriden with the correct addresses of the Chainlink 
feed 
/// and the right amount of decimals 
abstract contract OracleChainlinkMultiEfficient is ChainlinkUtils { 
// SSS SS SSS 5555S 5555S 5555555555555 Constants 


uint256 public constant OUTBASE = 10 ** 18; 


uint256 public constant BASE = 10 ** 18; 


error InvalidLength(); 


error ZeroAddress(); 


/// @notice Constructor of the contract 
/// @param _stalePeriod Minimum feed update frequency for the oracle to not revert 
/// @param guardians List of guardian addresses 
constructor(uint32 stalePeriod, address[] memory guardians) { 
stalePeriod = _stalePeriod; 
if (guardians.length == 0) revert InvalidLength(); 
for (uint256 i = 0; i < guardians.length; i++) { 
if (guardians[i] == address(0)) revert ZeroAddress(); 
_setupRole(GUARDIAN_ROLE_CHAINLINK, guardians[i]); 


} 
_setRoleAdmin(GUARDIAN_ROLE_CHAINLINK, GUARDIAN_ROLE_CHAINLINK); 


/// @notice Returns twice the value obtained from Chainlink feeds 
function readAll() external view returns (uint256, uint256) { 
uint256 quote = _quoteChainlink(BASE); 


return (quote, quote); 


/// @notice Returns the outToken value of 1 inToken 
function read() external view returns (uint256 rate) { 


rate = _quoteChainlink(BASE); 


/// @notice Returns the value of the inToken obtained from Chainlink feeds 
function readLower() external view returns (uint256 rate) { 


rate = _quoteChainlink(BASE); 


/// @notice Returns the value of the inToken obtained from Chainlink feeds 
function readUpper() external view returns (uint256 rate) { 


rate = _quoteChainlink(BASE); 


/// @notice Converts a quote amount of inToken to an outToken amount using Chainlink 
rates 
function readQuote(uint256 quoteAmount) external view returns (uint256) { 


return _readQuote(quoteAmount); 


/// @notice Converts a quote amount of inToken to an outToken amount using Chainlink 
rates 
function readQuoteLower( 
uint256 quoteAmount 
) external view returns (uint256) { 


return _readQuote(quoteAmount); 


/// @notice Internal function to convert an in-currency quote amount to out-currency using 


Chainlink's feed 


function readQuote(uint256 quoteAmount) internal view returns (uint256) { 
quoteAmount = (quoteAmount * BASE) / _inBase(); 
// We return only rates with base BASE 


return _quoteChainlink(quoteAmount); 


/// @notice Reads oracle price using a Chainlink circuit 
/// @param quoteAmount The amount for which to compute the price expressed with base 
decimal 
/// @return The ~quoteAmount* converted in EUR 
/// @dev If ~*quoteAmount’ is ~BASE_TOKENS’, the output is the oracle rate 
function _quoteChainlink( 
uint256 quoteAmount 
) internal view returns (uint256) { 
AggregatorvV3Interface[2] memory circuitChainlink = _circuitChainlink(); 
uint8[2] memory circuitChainlsMultiplied = _circuitChainlsMultiplied(); 
uint8[2] memory chainlinkDecimals = _chainlinkDecimals(); 
for (uint256 i = 0; i < circuitChainlink.length; i++) { 
(quoteAmount, ) = _readChainlinkFeed( 
quoteAmount, 
circuitChainlink[i], 
circuitChainlsMultiplied[i], 
chainlinkDecimals[i], 


0 


return quoteAmount; 


/// @notice Returns the base of the inToken 

/// @dev This function is a necessary function to keep in the interface of oracle contracts 
interacting with 

/// the core module of the protocol 

function inBase() external pure returns (uint256) { 


return _inBase(); 


/// @notice Returns the array of the Chainlink feeds to look at 
function _circuitChainlink() 

internal 

pure 

virtual 


returns (AggregatorV3Interface[2] memory); 


/// @notice Base of the inToken 


function inBase() internal pure virtual returns (uint256); 


/// @notice Amount of decimals of the Chainlink feeds of interest 
/// @dev This function is initialized with a specific amounts of decimals but should be 
overriden 
/// if a Chainlink feed does not have 8 decimals 


function _chainlinkDecimals() 


internal 
pure 
virtual 


returns (uint8[2] memory) 


return [8, 8]; 


/// @notice Whether the Chainlink feeds should be multiplied or divided with one another 
function _circuitChainlsMultiplied() 

internal 

pure 

virtual 


returns (uint8[2] memory) 


return [1, 0]; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\oracle/OracleChainlinkSingle.s 
ol---- 


// SPDX-License-lIdentifier: GPL-3.0 


// contracts/oracle/OracleChainlinkSingle.sol 


pragma solidity “0.8.7; 


import "./OracleAbstract.sol"; 


import "./modules/ModuleChainlinkSingle.sol"; 


/// @title OracleChainlinkSingle 
/// @author Angle Core Team 
/// @notice Oracle contract, one contract is deployed per collateral/stablecoin pair 
/// @dev This contract concerns an oracle that only uses Chainlink and a single pool 
/// @dev This is mainly going to be the contract used for the USD/EUR pool (or for other fiat 
currencies) 
/// @dev Like all oracle contracts, this contract is an instance of `OracleAstract that 
contains some 
/// base functions 
contract OracleChainlinkSingle is OracleAbstract, ModuleChainlinkSingle { 
/// @notice Constructor for the oracle using a single Chainlink pool 
/// @param _poolChainlink Chainlink pool address 
/// @param _isChainlinkMultiplied Whether we should multiply or divide by the Chainlink 
rate the 
/// in-currency amount to get the out-currency amount 


/// @param _inBase Number of units of the in-currency 


/// @param _description Description of the assets concerned by the oracle 
constructor( 

address _poolChainlink, 

uint8 _isChainlinkMultiplied, 

uint256 _inBase, 

uint32 stalePeriod, 

address[] memory guardians, 


bytes32 description 


ModuleChainlinkSingle( 
_poolChainlink, 
_isChainlinkMultiplied, 
StalePeriod, 


guardians 


inBase = _inBase; 


description = _description; 


/// @notice Reads the rate from the Chainlink feed 
/// @return rate The current rate between the in-currency and out-currency 
function read() external view override returns (uint256 rate) { 


(rate, ) = _quoteChainlink(BASE); 


/// @notice Converts an in-currency quote amount to out-currency using Chainlink's feed 
/// @param quoteAmount Amount (in the input collateral) to be converted in out-currency 
/// @return Quote amount in out-currency from the base amount in in-currency 
[I| @dev The amount returned is expressed with base `BASE` (and not the base of the 
out-currency) 
function readQuote( 
uint256 quoteAmount 
) external view override returns (uint256) { 


return _readQuote(quoteAmount); 


/// @notice Returns Chainlink quote value twice 
/// @param quoteAmount Amount expressed in the in-currency base. 
/// @dev If quoteAmount is `inBase`, rates are returned 
/// @return The two return values are similar in this case 
/// @dev The amount returned is expressed with base `BASE` (and not the base of the 
out-currency) 
function _readAll( 
uint256 quoteAmount 
) internal view override returns (uint256, uint256) { 
uint256 quote = _readQuote(quoteAmount); 


return (quote, quote); 


/// @notice Internal function to convert an in-currency quote amount to out-currency using 


Chainlink's feed 


/// @param quoteAmount Amount (in the input collateral) to be converted 
//| @dev The amount returned is expressed with base `BASE` (and not the base of the 
out-currency) 
function readQuote(uint256 quoteAmount) internal view returns (uint256) { 
quoteAmount = (quoteAmount * BASE) / inBase; 
(quoteAmount, ) = _quoteChainlink(quoteAmount); 
// We return only rates with base BASE 


return quoteAmount; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\oracle/OracleDAI.sol---- 


// SPDX-License-Identifier: GPL-3.0 


pragma solidity “0.8.7; 


import "@openzeppelin/contracts/token/ERC20/extensions/IERC20Metadata.sol"; 


import "./OracleAbstract.sol"; 


import "./modules/ModuleChainlinkMulti.sol"; 


import "./modules/ModuleUniswapMulti.sol"; 


/// @title OracleDAl 
/// @author Angle Core Team 
/// @notice Oracle contract, one contract is deployed per collateral/stablecoin pair 
/// @dev This contract concerns an oracle that only uses both Chainlink and Uniswap for 
multiple pools 
/// @dev This is going to be used for like ETH/EUR oracles 
/// @dev Like all oracle contracts, this contract is an instance of `OracleAstract that 
contains some 
/// base functions 
contract OracleDAI is OracleAbstract, ModuleChainlinkMulti, ModuleUniswapMulti { 
/// @notice Whether the final rate obtained with Uniswap should be multiplied to last rate 
from Chainlink 


uint8 public immutable uniFinalCurrency; 


/// @notice Unit out Uniswap currency 


uint256 public immutable outBase; 


/// @notice Constructor for an oracle using both Uniswap and Chainlink with multiple pools 
to read from 

/// @param addressInAndOutUni List of 2 addresses representing the in-currency address 
and the out-currency address 

/// @param _circuitUniswap Path of the Uniswap pools 

/// @param _circuitUnilsMultiplied Whether we should multiply or divide by this rate in the 
path 

/// @param _twapPeriod Time weighted average window for all Uniswap pools 

/// @param observationLength Number of observations that each pool should have stored 

/// @param _uniFinalCurrency Whether we need to use the last Chainlink oracle to convert 
to another 

/// currency / asset (Forex for instance) 

/// @param _circuitChainlink Chainlink pool addresses put in order 

/// @param _circuitChainlsMultiplied Whether we should multiply or divide by this rate 

/// @param guardians List of governor or guardian addresses 

/// @param _description Description of the assets concerned by the oracle 

/// @dev When deploying this contract, it is important to check in the case where Uniswap 
circuit is not final whether 

/// Chainlink and Uniswap circuits are compatible. If Chainlink is UNI-WBTC and WBTC-USD 
and Uniswap is just UNI-WETH, 

/// then Chainlink cannot be the final circuit 

constructor( 


address[] memory addressInAndOutUni, 


IUniswapV3Pool[] memory _circuitUniswap, 
uint8[] memory _circuitUnilsMultiplied, 
uint32 _twapPeriod, 

uintl6 observationLength, 

uint8 _uniFinalCurrency, 

address[] memory _circuitChainlink, 
uint8[] memory _circuitChainlsMultiplied, 
uint32 stalePeriod, 

address[] memory guardians, 


bytes32 description 


ModuleUniswapMulti( 
_circuitUniswap, 
_circuitUnilsMultiplied, 
_twapPeriod, 
observationLength, 
guardians 

) 

ModuleChainlinkMulti( 
_circuitChainlink, 
_circuitChainlsMultiplied, 
stalePeriod, 


guardians 


require(addressInAndOutUni.length == 2, "107"); 


// Using the tokens' metadata to get the in and out currencies decimals 
IERC20Metadata inCur = IERC20Metadata(addressInAndOutUni[0]); 
IERC20Metadata outCur = IERC20Metadata(addressInAndOutUni[1]); 
inBase = 10 ** (inCur.decimals()); 


outBase = 10 ** (outCur.decimals()); 


uniFinalCurrency = _uniFinalCurrency; 


description = _description; 


/// @notice Reads the Uniswap rate using the circuit given 
/// @return The current rate between the in-currency and out-currency 
/// @dev By default even if there is a Chainlink rate, this function returns the Uniswap rate 
[I| @dev The amount returned is expressed with base `BASE` (and not the base of the 
out-currency) 
function read() external view override returns (uint256) { 


return _readUniswapQuote(inBase); 


/// @notice Converts an in-currency quote amount to out-currency using the Uniswap rate 
/// @param quoteAmount Amount (in the input collateral) to be converted in out-currency 
/// @return Quote amount in out-currency from the base amount in in-currency 
/// @dev Like in the ‘read’ function, this function returns the Uniswap quote 
/// @dev The amount returned is expressed with base `BASE` (and not the base of the 
out-currency) 


function readQuote( 


uint256 quoteAmount 
) external view override returns (uint256) { 


return _readUniswapQuote(quoteAmount); 


/// @notice Returns Uniswap and Chainlink values (with the first one being the smallest 
one) 
[I| @param quoteAmount Amount expressed in the in-currency base. 
/// @dev If quoteAmount is “inBase’, rates are returned 
/// @return The first parameter is the lowest value and the second parameter is the 
highest 
//| @dev The amount returned is expressed with base `BASE` (and not the base of the 
out-currency) 
function _readAll( 
uint256 quoteAmount 
) internal view override returns (uint256, uint256) { 


uint256 quoteAmountUni = _quoteUniswap(quoteAmount); 


// The current uni rate is in `outBase`ò we want our rate to all be in base `BASE` 
quoteAmountUni = (quoteAmountUni * BASE) / outBase; 

// The current amount is in `inBase`ò we want our rate to all be in base `BASE` 
uint256 quoteAmountCL = (quoteAmount * BASE) / inBase; 


uint256 ratio; 


(quoteAmountCL, ratio) = _quoteChainlink(quoteAmountCL); 


if (uniFinalCurrency > 0) { 


quoteAmountUni = _changeUniswapNotFinal(ratio, quoteAmountUni); 


// As DAI is made to be a stablecoin, compute the rate as if Uniswap returned “BASE * 
quoteAmount / inBase’ 


ratio = _changeUniswapNotFinal(ratio, (quoteAmount * BASE) / inBase); 


if (quoteAmountCL <= quoteAmountUni) { 
if (ratio <= quoteAmountCL) { 
return (ratio, quoteAmountUni); 
} else if (quoteAmountUni <= ratio) { 
return (quoteAmountCL, ratio); 
} 
return (quoteAmountCL, quoteAmountUni); 
} else { 
if (ratio <= quoteAmountUni) { 
return (ratio, quoteAmountCL); 
} else if (quoteAmountCL <= ratio) { 
return (quoteAmountUni, ratio); 
} 


return (quoteAmountUni, quoteAmountCL); 


/// @notice Uses Chainlink's value to change Uniswap's rate 


/// @param ratio Value of the last oracle rate of Chainlink 
[I| @param quoteAmountUni End quote computed from Uniswap's circuit 
/// @dev We use the last Chainlink rate to correct the value obtained with Uniswap. It may 
for instance be used 
/// to get a Uniswap price in EUR (ex: ETH -> USDC and we use this to do USDC -> EUR) 
function changeUniswapNotFinal( 
uint256 ratio, 
uint256 quoteAmountUni 
) internal view returns (uint256) { 
uint256 idxLastPooICL = circuitChainlink.length - 1; 
(quoteAmountUni, ) = _readChainlinkFeed( 
quoteAmountUni, 
circuitChainlink[idxLastPoolCL], 
circuitChainIlsMultiplied[idxLastPoolCL], 
chainlinkDecimals[idxLastPoolCL], 
ratio 
); 


return quoteAmountUni; 


/// @notice Internal function to convert an in-currency quote amount to out-currency using 
only the Uniswap rate 

/// and by correcting it if needed from Chainlink last rate 

/// @param quoteAmount Amount (in the input collateral) to be converted in out-currency 
using Uniswap (and Chainlink) 


/// at the end of the funnel 


/// @return uniAmount Quote amount in out-currency from the base amount in in-currency 
/// @dev The amount returned is expressed with base `BASE` (and not the base of the 
out-currency) 
function _readUniswapQuote( 
uint256 quoteAmount 
) internal view returns (uint256 uniAmount) { 
uniAmount = _quoteUniswap(quoteAmount); 
// The current uni rate is in outBase we want our rate to all be in base 
uniAmount = (uniAmount * BASE) / outBase; 
if (uniFinalCurrency > 0) { 


uniAmount = _changeUniswapNotFinal(0, uniAmount); 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\oracle/OracleMulti.sol---- 


// SPDX-License-Identifier: GPL-3.0 


pragma solidity “0.8.7; 


import "@openzeppelin/contracts/token/ERC20/extensions/IERC20Metadata.sol"; 


import "./OracleAbstract.sol"; 


import "./modules/ModuleChainlinkMulti.sol"; 


import "./modules/ModuleUniswapMulti.sol"; 


/// @title OracleMulti 
/// @author Angle Core Team 
/// @notice Oracle contract, one contract is deployed per collateral/stablecoin pair 
/// @dev This contract concerns an oracle that only uses both Chainlink and Uniswap for 
multiple pools 
/// @dev This is going to be used for like ETH/EUR oracles 
/// @dev Like all oracle contracts, this contract is an instance of `OracleAstract that 
contains some 
/// base functions 
contract OracleMulti is 
OracleAbstract, 
ModuleChainlinkMulti, 


ModuleUniswapMulti 


/// @notice Whether the final rate obtained with Uniswap should be multiplied to last rate 
from Chainlink 


uint8 public immutable uniFinalCurrency; 


/// @notice Unit out Uniswap currency 


uint256 public immutable outBase; 


/// @notice Constructor for an oracle using both Uniswap and Chainlink with multiple pools 
to read from 

/// @param addressInAndOutUni List of 2 addresses representing the in-currency address 
and the out-currency address 

/// @param _circuitUniswap Path of the Uniswap pools 

/// @param _circuitUnilsMultiplied Whether we should multiply or divide by this rate in the 
path 

/// @param _twapPeriod Time weighted average window for all Uniswap pools 

/// @param observationLength Number of observations that each pool should have stored 

/// @param _uniFinalCurrency Whether we need to use the last Chainlink oracle to convert 
to another 

/// currency / asset (Forex for instance) 

/// @param _circuitChainlink Chainlink pool addresses put in order 

/// @param _circuitChainlsMultiplied Whether we should multiply or divide by this rate 

/// @param guardians List of governor or guardian addresses 

/// @param _description Description of the assets concerned by the oracle 

/// @dev When deploying this contract, it is important to check in the case where Uniswap 
circuit is not final whether 


/// Chainlink and Uniswap circuits are compatible. If Chainlink is UNI-WBTC and WBTC-USD 


and Uniswap is just UNI-WETH, 

/// then Chainlink cannot be the final circuit 

constructor( 
address[] memory addressInAndOutUni, 
IlUniswapV3Pool[] memory _circuitUniswap, 
uint8[] memory _circuitUnilsMultiplied, 
uint32 _twapPeriod, 
uintl6 observationLength, 
uint8 _uniFinalCurrency, 
address[] memory _circuitChainlink, 
uint8[] memory _circuitChainlsMultiplied, 
uint32 stalePeriod, 
address[] memory guardians, 


bytes32 description 


ModuleUniswapMulti( 
_circuitUniswap, 
_circuitUnilsMultiplied, 
_twapPeriod, 
observationLength, 
guardians 

) 

ModuleChainlinkMulti( 
_circuitChainlink, 
_circuitChainlsMultiplied, 


_stalePeriod, 


guardians 


require(addressInAndOutUni.length == 2, "107"); 

// Using the tokens' metadata to get the in and out currencies decimals 
IERC20Metadata inCur = IERC20Metadata(addressInAndOutUni[0]); 
IERC20Metadata outCur = IERC20Metadata(addressInAndOutUni[1]); 
inBase = 10 ** (inCur.decimals()); 


outBase = 10 ** (outCur.decimals()); 


uniFinalCurrency = _uniFinalCurrency; 


description = _description; 


/// @notice Reads the Uniswap rate using the circuit given 
/// @return The current rate between the in-currency and out-currency 
/// @dev By default even if there is a Chainlink rate, this function returns the Uniswap rate 
/// @dev The amount returned is expressed with base `BASE` (and not the base of the 
out-currency) 
function read() external view override returns (uint256) { 


return readUniswapQuote(inBase); 


/// @notice Converts an in-currency quote amount to out-currency using the Uniswap rate 
/// @param quoteAmount Amount (in the input collateral) to be converted in out-currency 


/// @return Quote amount in out-currency from the base amount in in-currency 


/// @dev Like in the ‘read’ function, this function returns the Uniswap quote 


[I| @dev The amount returned is expressed with base `BASE` (and not the base of the 


out-currency) 
function readQuote( 
uint256 quoteAmount 
) external view override returns (uint256) { 


return _readUniswapQuote(quoteAmount); 


/// @notice Returns Uniswap and Chainlink values (with the first one being the smallest 
one) 
/// @param quoteAmount Amount expressed in the in-currency base. 
/// @dev If quoteAmount is “inBase’, rates are returned 
/// @return The first parameter is the lowest value and the second parameter is the 
highest 
/// @dev The amount returned is expressed with base `BASE` (and not the base of the 
out-currency) 
function _readAll( 
uint256 quoteAmount 
) internal view override returns (uint256, uint256) { 


uint256 quoteAmountUni = _quoteUniswap(quoteAmount); 


// The current uni rate is in `outBase` we want our rate to all be in base `BASE` 
quoteAmountUni = (quoteAmountUni * BASE) / outBase; 
// The current amount is in ‘inBase’ we want our rate to all be in base `BASE` 


uint256 quoteAmountCL = (quoteAmount * BASE) / inBase; 


uint256 ratio; 


(quoteAmountCL, ratio) = _quoteChainlink(quoteAmountCL); 


if (uniFinalCurrency > 0) { 

quoteAmountUni = _changeUniswapNotFinal(ratio, quoteAmountUni); 
} 
if (quoteAmountCL <= quoteAmountUni) { 

return (quoteAmountCL, quoteAmountUni); 


} else return (quoteAmountUni, quoteAmountCL); 


/// @notice Uses Chainlink's value to change Uniswap's rate 
/// @param ratio Value of the last oracle rate of Chainlink 
/// @param quoteAmountUni End quote computed from Uniswap's circuit 
/// @dev We use the last Chainlink rate to correct the value obtained with Uniswap. It may 
for instance be used 

/// to get a Uniswap price in EUR (ex: ETH -> USDC and we use this to do USDC -> EUR) 
function changeUniswapNotFinal( 

uint256 ratio, 

uint256 quoteAmountUni 
) internal view returns (uint256) { 

uint256 idxLastPooICL = circuitChainlink.length - 1; 

(quoteAmountUni, ) = _readChainlinkFeed( 

quoteAmountUni, 


circuitChainlink[idxLastPoolCL], 


circuitChainilsMultiplied[idxLastPoolCL], 
chainlinkDecimals[idxLastPoolCL], 
ratio 

); 


return quoteAmountUni; 


/// @notice Internal function to convert an in-currency quote amount to out-currency using 
only the Uniswap rate 
/// and by correcting it if needed from Chainlink last rate 
/// @param quoteAmount Amount (in the input collateral) to be converted in out-currency 
using Uniswap (and Chainlink) 
/// at the end of the funnel 
/// @return uniAmount Quote amount in out-currency from the base amount in in-currency 
[I| @dev The amount returned is expressed with base `BASE` (and not the base of the 
out-currency) 
function _readUniswapQuote( 
uint256 quoteAmount 
) internal view returns (uint256 uniAmount) { 
uniAmount = _quoteUniswap(quoteAmount); 
// The current uni rate is in outBase we want our rate to all be in base 
uniAmount = (uniAmount * BASE) / outBase; 
if (uniFinalCurrency > 0) { 


uniAmount = _changeUniswapNotFinal(0, uniAmount); 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\oracle/Seer.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


import "./OracleMulti.sol"; 


import {lOracle as ITOracle} from "../interfaces/lOracle.sol"; 


contract Seer is ITOracle, OracleMulti { 
string public name; 
string public symbol; 


uint8 public immutable override decimals; 


constructor( 
string memory _name, 
string memory _ symbol, 
uint8 decimals, 
address[] memory addressInAndOutUni, 
lUniswapV3Pool[] memory _circuitUniswap, 
uint8[] memory _circuitUnilsMultiplied, 
uint32 _twapPeriod, 
uintl6 observationLength, 
uint8 _uniFinalCurrency, 
address[] memory _circuitChainlink, 
uint8[] memory _circuitChainlsMultiplied, 
uint32 stalePeriod, 


address[] memory guardians, 


bytes32 description 


OracleMulti( 
addressInAndOutUni, 
_circuitUniswap, 
_circuitUnilsMultiplied, 
_twapPeriod, 
observationLength, 
_uniFinalCurrency, 
_circuitChainlink, 
_circuitChainlsMultiplied, 
_stalePeriod, 
guardians, 


_description 


_name = _name; 
_symbol = _ symbol; 


decimals = _decimals; 


/// @notice Get the latest exchange rate. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 


/// @return success if no valid (recent) rate is available, return false else true. 


/// @return rate The rate of the requested asset / pair / pool. 
function get( 

bytes calldata 
) external virtual returns (bool success, uint256 rate) { 

(, uint256 high) = _readAll(inBase); 


return (true, high); 


/// @notice Check the last exchange rate without any state changes. 
/// For example: 

/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 

abi.decode(data, (string, string, uint256)); 
/// @return success if no valid (recent) rate is available, return false else true. 
/// @return rate The rate of the requested asset / pair / pool. 
function peek( 
bytes calldata 

) external view virtual returns (bool success, uint256 rate) { 

(, uint256 high) = _readAll(inBase); 


return (true, high); 


/// @notice Check the current spot exchange rate without any state changes. For oracles 
like TWAP this will be different from peek(). 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 


abi.decode(data, (string, string, uint256)); 


/// @return rate The rate of the requested asset / pair / pool. 
function peekSpot( 

bytes calldata 
) external view virtual returns (uint256 rate) { 

(, uint256 high) = _readAll(inBase); 


return high; 


/// @notice Returns a human readable (short) name about this oracle. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return (string) A human readable symbol name about this oracle. 
function symbol(bytes calldata) external view returns (string memory) { 


return symbol; 


/// @notice Returns a human readable name about this oracle. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return (string) A human readable name about this oracle. 
function name(bytes calldata) external view returns (string memory) { 


return name; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\oracle\external/AccessControl. 
sol---- 


// SPDX-License-lIdentifier: GPL-3.0 


pragma solidity “0.8.7; 


import "@openzeppelin/contracts/utils/Context.sol"; 


import "@openzeppelin/contracts/utils/Strings.sol"; 


import "../interfaces/I[AccessControl.sol"; 


[** 

* @dev This contract is fully forked from OpenZeppelin ~AccessControl’. 

* The only difference is the removal of the ERC165 implementation as it's not 

* needed in Angle. 

* 

* Contract module that allows children to implement role-based access 

* control mechanisms. This is a lightweight version that doesn't allow enumerating role 
* members except through off-chain means by accessing the contract event logs. Some 
* applications may benefit from on-chain enumerability, for those cases see 

* {AccessControlEnumerable}. 

* 

* Roles are referred to by their `bytes32` identifier. These should be exposed 

* in the external API and be unique. The best way to achieve this is by 


* using public constant’ hash digests: 


* 


* bytes32 public constant MY_ROLE = keccak256("MY_ROLE"); 


x` 


* Roles can be used to represent a set of permissions. To restrict access to a 


* function call, use {hasRole}: 


* 


* function foo() public { 


* ~~ require(hasRole(MY_ROLE, msg.sender)); 


ws 


* Roles can be granted and revoked dynamically via the {grantRole} and 

* {revokeRole} functions. Each role has an associated admin role, and only 

* accounts that have a role's admin role can call {grantRole} and {revokeRole}. 
* 

* By default, the admin role for all roles is ‘DEFAULT ADMIN ROLE’, which means 
* that only accounts with this role will be able to grant or revoke other 

* roles. More complex role relationships can be created by using 

* { setRoleAdmin}. 

* 

* WARNING: The ~DEFAULT_ADMIN_ ROLE?’ is also its own admin: it has permission to 
* grant and revoke this role. Extra precautions should be taken to secure 


* accounts that have been granted it. 


*/ 
abstract contract AccessControl is Context, [AccessControl { 
struct RoleData { 
mapping(address => bool) members; 


bytes32 adminRole; 


mapping(bytes32 => RoleData) private _roles; 


bytes32 public constant DEFAULT_ADMIN_ROLE = 0x00; 


[** 
* @dev Emitted when *newAdminRole’ is set as ``role``'s admin role, replacing 
‘previousAdminRole’ 
* 
* *‘DEFAULT_ADMIN_ROLE?’ is the starting admin for all roles, despite 
* {RoleAdminChanged} not being emitted signaling this. 
* 
* Available since v3.1._ 
*/ 
event RoleAdminChanged( 
bytes32 indexed role, 
bytes32 indexed previousAdminRole, 


bytes32 indexed newAdminRole 


[** 
* @dev Emitted when ‘account’ is granted ‘role’. 
* 
* “sender is the account that originated the contract call, an admin role 
* bearer except when using {_setupRole}. 
*/ 
event RoleGranted( 
bytes32 indexed role, 
address indexed account, 


address indexed sender 


[** 
* @dev Emitted when `account` is revoked `role`. 
* 
* ‘sender’ is the account that originated the contract call: 
* -if using “revokeRole’, it is the admin role bearer 
* -if using “renounceRole’, it is the role bearer (i.e. “account? ) 
*/ 
event RoleRevoked( 
bytes32 indexed role, 
address indexed account, 


address indexed sender 


[** 


* @dev Modifier that checks that an account has a specific role. Reverts 
* with a standardized message including the required role. 


* 


* The format of the revert reason is given by the following regular expression: 


* 
* /*AccessControl: account (Ox[0-9a-f]{20}) is missing role (Ox[0-9a-f]{32})$/ 
* 

* Available since v4.1._ 

*/ 

modifier onlyRole(bytes32 role) { 


_checkRole(role, _msgSender()); 


[** 
* @dev Returns ‘true’ if ‘account’ has been granted ‘role’. 
*/ 
function hasRole( 
bytes32 role, 
address account 
) public view override returns (bool) { 


return _roles[role].members[account]; 


[** 


* @dev Revert with a standard message if “account is missing ‘role’. 


* 


* The format of the revert reason is given by the following regular expression: 
* 
* /*AccessControl: account (Ox[0-9a-f]{20}) is missing role (Ox[0-9a-f]{32})$/ 
*/ 
function _checkRole(bytes32 role, address account) internal view { 
if (!hasRole(role, account)) { 
revert( 
string( 
abi.encodePacked( 

"AccessControl: account ", 

Strings.toHexString(uint160(account), 20), 

"is missing role ", 


Strings.toHexString(uint256(role), 32) 


[** 
* @dev Returns the admin role that controls ‘role’. See {grantRole} and 


* {revokeRole}. 


* 


* To change a role's admin, use {_setRoleAdmin}. 


aL 


function getRoleAdmin(bytes32 role) public view override returns (bytes32) { 


return _roles[role].adminRole; 


[** 

* @dev Grants ‘role’ to ‘account’. 

* 

* If ‘account’ had not been already granted ‘role’, emits a {RoleGranted} 
* event. 


* 


* Requirements: 
* 
* - the caller must have ``role``'s admin role. 
*/ 
function grantRole( 
bytes32 role, 
address account 
) external override onlyRole(getRoleAdmin(role)) { 


_grantRole(role, account); 


[** 


* @dev Revokes ‘role’ from ‘account. 


* 


* If ‘account’ had been granted ‘role’, emits a {RoleRevoked} event. 


* 


* Requirements: 
* 
* - the caller must have ``role``'s admin role. 
*/ 
function revokeRole( 
bytes32 role, 
address account 
) external override onlyRole(getRoleAdmin(role)) { 


_revokeRole(role, account); 


[** 

* @dev Revokes ‘role’ from the calling account. 

* 

* Roles are often managed via {grantRole} and {revokeRole}: this function's 
* purpose is to provide a mechanism for accounts to lose their privileges 

* if they are compromised (such as when a trusted device is misplaced). 

* 

* If the calling account had been granted ‘role’, emits a {RoleRevoked} 

* event. 


* 


* Requirements: 


* 
* - the caller must be ‘account’. 
*/ 


function renounceRole(bytes32 role, address account) external override { 


require(account == _msgSender(), "71"); 


_revokeRole(role, account); 


[** 

* @dev Grants ‘role’ to ‘account’. 

* 

* If ‘account’ had not been already granted ‘role’, emits a {RoleGranted} 
* event. Note that unlike {grantRole}, this function doesn't perform any 

* checks on the calling account. 

* 

* [WARNING] 

x ===> 

* This function should only be called from the constructor when setting 

* up the initial roles for the system. 

* 

* Using this function in any other way is effectively circumventing the admin 
* system imposed by {AccessControl}. 

x ————— and 

*/ 

function setupRole(bytes32 role, address account) internal { 


_grantRole(role, account); 


[** 


* @dev Sets ‘adminRole’ as ‘role’ *'s admin role. 

* 

* Emits a {RoleAdminChanged} event. 

*/ 

function setRoleAdmin(bytes32 role, bytes32 adminRole) internal { 
emit RoleAdminChanged(role, getRoleAdmin(role), adminRole); 


_roles[role].adminRole = adminRole; 


function grantRole(bytes32 role, address account) internal { 
if (‘hasRole(role, account)) { 
_roles[role].members[account] = true; 


emit RoleGranted(role, account, _msgSender()); 


function revokeRole(bytes32 role, address account) internal { 
if (hasRole(role, account)) { 
_roles[role].members[account] = false; 


emit RoleRevoked(role, account, _msgSender()); 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\oracle\external/FullMath.sol---- 


// SPDX-License-Identifier: GPL-3.0 


pragma solidity >=0.4.0; 


/// @title Contains 512-bit math functions 
/// @notice Facilitates multiplication and division that can have overflow of an intermediate 
value without any loss of precision 
/// @dev Handles "phantom overflow" i.e., allows multiplication and division where an 
intermediate value overflows 256 bits 
/// @dev This contract was forked from Uniswap V3's contract `FullMath.sol available here 
/// https://github.com/Uniswap/uniswap-v3-core/blob/main/contracts/libraries/FullMath.sol 
abstract contract FullMath { 
/// @notice Calculates floor(aA—bA-denominator) with full precision. Throws if result 
overflows a uint256 or denominator == 
/// @param a The multiplicand 
/// @param b The multiplier 
/// @param denominator The divisor 
/// @return result The 256-bit result 
/// @dev Credit to Remco Bloemen under MIT license https://xn--2-umb.com/21/muldiv 
/// @dev Contrary to UniswapV3 implementation, this contract doesn't handle `a*b` 
overflows 
/// and will revert if so 
function _mulDiv( 
uint256 a, 


uint256 b, 


uint256 denominator 
) internal pure returns (uint256 result) { 

//512-bit multiply [prod1 prod0] =a*b 
// Compute the product mod 2**256 and mod 2**256 - 1 
// then use the Chinese Remainder Theorem to reconstruct 
// the 512 bit result. The result is stored in two 256 
// variables such that product = prod1 * 2**256 + prodO 
uint256 prodO; // Least significant 256 bits of the product 
uint256 prod1; // Most significant 256 bits of the product 
assembly { 

let mm := mulmod(a, b, not(0)) 

prodO := mul(a, b) 


prod1 := sub(sub(mm, prodO), It(mm, prodO)) 


// Handle non-overflow cases, 256 by 256 division 
if (prodl == 0) { 
require(denominator > 0); 
assembly { 
result := div(prod0, denominator) 
} 


return result; 


// Make sure the result is less than 2**256. 


// Also prevents denominator == 


require(denominator > prod1); 


MMMM 
// 512 by 256 division. 


IMT 


// Make division exact by subtracting the remainder from [prod1 prod0] 
// Compute remainder using mulmod 
uint256 remainder; 
assembly { 
remainder := mulmod(a, b, denominator) 
} 
// Subtract 256 bit number from 512 bit number 
assembly { 
prod1 := sub(prod1, gt(remainder, prodO)) 


prodO := sub(prodO, remainder) 


// Factor powers of two out of denominator 

// Compute largest power of two divisor of denominator. 
// Always >= 1. 

uint256 twos = denominator & (~denominator + 1); 

// Divide denominator by power of two 

assembly { 


denominator := div(denominator, twos) 


// Divide [prod1 prodO] by the factors of two 
assembly { 
prodO := div(prodO, twos) 
} 
// Shift in bits from prod1 into prodO. For this we need 
// to flip “twos” such that it is 2**256 / twos. 
// \f twos is zero, then it becomes one 
assembly { 
twos := add(div(sub(0, twos), twos), 1) 
} 


prodO |= prod1 * twos; 


// Invert denominator mod 2**256 

// Now that denominator is an odd number, it has an inverse 

// modulo 2**256 such that denominator * inv = 1 mod 2**256. 
// Compute the inverse by starting with a seed that is correct 
// correct for four bits. That is, denominator * inv = 1 mod 2**4 
uint256 inv = (3 * denominator) ^ 2; 

// Now use Newton-Raphson iteration to improve the precision. 
// Thanks to Hensel's lifting lemma, this also works in modular 
// arithmetic, doubling the correct bits in each step. 

inv *= 2 - denominator * inv; // inverse mod 2**8 

inv *= 2 - denominator * inv; // inverse mod 2**16 

inv *= 2 - denominator * inv; // inverse mod 2**32 


inv *= 2 - denominator * inv; // inverse mod 2**64 


inv *= 2 - denominator * inv; // inverse mod 2**128 


inv *= 2 - denominator * inv; // inverse mod 2**256 


// Because the division is now exact we can divide by multiplying 
// with the modular inverse of denominator. This will give us the 
// correct result modulo 2**256. Since the precoditions guarantee 
// that the outcome is less than 2**256, this is the final result. 

// We don't need to compute the high bits of the result and prod1 
// is no longer required. 

result = prodO * inv; 


return result; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\oracle\implementations/ARBTri 
CryptoOracle.sol---- 
// SPDX-License-ldentifier: UNLICENSED 


pragma solidity *0.8.9; 


import {AggregatorV2V3Interface} from 
"“@chainlink/contracts/src/v0.8/interfaces/AggregatorV2V3Interface.sol"; 
import {Math} from "@openzeppelin/contracts/utils/math/Math.sol"; 


import {FixedPointMathLib} from "solady/src/utils/FixedPointMathLib.sol"; 


import {lOracle as ITOracle} from "../../interfaces/lOracle.sol"; 


interface ICurvePool { 


function coins(uint256 i) external view returns (address); 


function get_dy( 


int128 i, 


int128 j, 


uint256 dx 


) external view returns (uint256); 


function exchange(int128 i, int128 j, uint256 dx, uint256 min_dy) external; 


function get_virtual_price() external view returns (uint256); 


function gamma() external view returns (uint256); 


function A() external view returns (uint256); 


/// @notice Courtesy of https://gist.github.com/0xShaito/f01f04cb26d0f89a0cead15cff3f7047 
/// @dev Addresses are for Arbitrum 
contract ARBTriCryptoOracle is ITOracle { 

string public name; 


string public symbol; 


ICurvePool public immutable TRI_CRYPTO; 
AggregatorV2V3Interface public immutable BTC_FEED; 
AggregatorV2V3Interface public immutable ETH_FEED; 
AggregatorV2V3Interface public immutable USDT_FEED; 


AggregatorV2V3Interface public immutable WBTC_FEED; 


uint256 public constant GAMMAO = 28 000 000 000 _000; // 2.8e-5 
uint256 public constant AO = 2 * 3 ** 3 * 10 000; 


uint256 public constant DISCOUNTO = 1_087_460_000_000_000; // 0.00108.. 


constructor( 
string memory _name, 
string memory _ symbol, 
ICurvePool pool, 
AggregatorV2V3Interface btcFeed, 


AggregatorV2V3Interface ethFeed, 


AggregatorV2V3Interface usdtFeed, 

AggregatorV2V3Interface wbtcFeed 
){ 

_name = _ name; 

_symbol = _ symbol; 

TRI_CRYPTO = pool; 

BTC_FEED = btcFeed; 

ETH FEED = ethFeed; 

USDT_FEED = usdtFeed; 


WBTC_FEED = wbtcFeed; 


function decimals() external pure returns (uint8) { 


return 18; 


/// @notice Get the latest exchange rate. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return success if no valid (recent) rate is available, return false else true. 
/// @return rate The rate of the requested asset / pair / pool. 
function get( 
bytes calldata 
) external virtual returns (bool success, uint256 rate) { 


return (true, _get()); 


/// @notice Check the last exchange rate without any state changes. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return success if no valid (recent) rate is available, return false else true. 
/// @return rate The rate of the requested asset / pair / pool. 
function peek( 
bytes calldata 
) external view virtual returns (bool success, uint256 rate) { 


return (true, get()); 


/// @notice Check the current spot exchange rate without any state changes. For oracles 
like TWAP this will be different from peek(). 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return rate The rate of the requested asset / pair / pool. 
function peekSpot( 
bytes calldata 
) external view virtual returns (uint256 rate) { 


return _get(); 


/// @notice Returns a human readable (short) name about this oracle. 


/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return (string) A human readable symbol name about this oracle. 


function symbol(bytes calldata) external view returns (string memory) { 


return symbol; 


/// @notice Returns a human readable name about this oracle. 


/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return (string) A human readable name about this oracle. 


function name(bytes calldata) external view returns (string memory) { 


return name; 


/// @notice Calculated the price of 1 LP token 

/// @return _maxPrice the current value 

/// @dev This function comes from the implementation in vyper that is on the bottom 
function get() internal view returns (uint256_ maxPrice) { 


uint256 vp = TRI_CRYPTO.get_virtual_price(); 


// Get the prices from chainlink and add 10 decimals 


uint256 _btcPrice = uint256(BTC_FEED.latestAnswer()) * 1e10; 


uint256 wbtcPrice = uint256(WBTC_FEED.latestAnswer()) * 1e10; 
uint256 _ethPrice = uint256(ETH_FEED.latestAnswer()) * 1e10; 


uint256 usdtPrice = uint256(USDT_FEED.latestAnswer()) * 1e10; 


uint256 _minWbtcPrice = (_wbtcPrice < 1e18) 
? (_.wbtcPrice * _btcPrice) /1e18 


: _btcPrice; 


uint256 basePrices = (_minWbtcPrice * _ethPrice * usdtPrice); 


_maxPrice = (3 * _vp * FixedPointMathLib.cbrt(_basePrices)) / 1 ether; 


// ((A/AO) * (gamma/gamma0)**2) ** (1/3) 
uint256 _g = (TRI_CRYPTO.gamma() * 1 ether) / GAMMAO; 
uint256 _a = (TRI_CRYPTO.A() * 1 ether) / AO; 
uint256 discount = Math.max((_g ** 2 / 1 ether) * _a, 1e34); // handle qbrt 
nonconvergence 
// if discount is small, we take an upper bound 


_discount = (FixedPointMathLib.sqrt(_discount) * DISCOUNTO) / 1 ether; 


_maxPrice -= (_maxPrice * discount) / 1 ether; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\oracle\implementations/GLPOr 
acle.sol---- 
// SPDX-License-lIdentifier: UNLICENSED 


pragma solidity >=0.8.0; 


import {lOracle} from "../../interfaces/lOracle.sol"; 


import {IGmxGlpManager} from "../../interfaces/IGmMxGloManager.sol"; 


contract GLPOracle is lOracle { 


IGmxGlpManager private immutable glpManager; 


constructor(IGmxGlpManager glopManager_) { 


glpManager = glpManager _; 


function decimals() external pure returns (uint8) { 


return 30; 


function _get() internal view returns (uint256) { 


return gloManager.getPrice(false); 


// Get the latest exchange rate 
/// @inheritdoc lOracle 


function get( 


bytes calldata 
) public view override returns (bool success, uint256 rate) { 


return (true, get()); 


// Check the last exchange rate without any state changes 
/// @inheritdoc lOracle 
function peek( 
bytes calldata 
) public view override returns (bool success, uint256 rate) { 


return (true, get()); 


// Check the current spot exchange rate without any state changes 
/// @inheritdoc lOracle 
function peekSpot( 
bytes calldata data 
) external view override returns (uint256 rate) { 


(, rate) = peek(data); 


/// @inheritdoc lOracle 
function name(bytes calldata) public pure override returns (string memory) { 


return "GLP/USD"; 


/// @inheritdoc lOracle 
function symbol( 
bytes calldata 
) public pure override returns (string memory) { 


return "GLP/USD"; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\oracle\implementations/SGOra 
cle.sol---- 

// SPDX-License-lIdentifier: UNLICENSED 

pragma solidity *0.8.9; 

import {AggregatorV2V3Interface} from 
"@chainlink/contracts/src/v0.8/interfaces/AggregatorV2V3Interface.sol"; 


import {lOracle} from "../../interfaces/lOracle.sol"; 


interface IStargatePool { 


function deltaCredit() external view returns (uint256); 


function totalLiquidity() external view returns (uint256); 


function totalSupply() external view returns (uint256); 


function decimals() external view returns (uint256); 


function localDecimals() external view returns (uint256); 


function token() external view returns (address); 


/// @notice Courtesy of https://gist.github.com/0xShaito/f01f04cb26d0f89a0cead15cff3f7047 


/// @dev Addresses are for Arbitrum 


contract SGOracle is lOracle { 


string public name; 


string public symbol; 


IStargatePool public immutable SG POOL; 


AggregatorV2V3Interface public immutable UNDERLYING; 


constructor( 
string memory _name, 
string memory _ symbol, 
IStargatePool pool, 
AggregatorV2V3Interface underlying 
){ 
_name = _name; 
_symbol = _ symbol; 
SG POOL = pool; 


UNDERLYING = _underlying; 


function decimals() external view returns (uint8) { 


return UNDERLYING.decimals(); 


/// @notice Calculated the price of 1 LP token 
/// @return _maxPrice the current value 
/// @dev This function comes from the implementation in vyper that is on the bottom 


function get() internal view returns (uint256_ maxPrice) { 


uint256 IpPrice = (SG_POOL.totalLiquidity() * 


uint256(UNDERLYING.latestAnswer())) /SG_ POOL.totalSupply(); 


return |pPrice; 


/// @notice Get the latest exchange rate. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return success if no valid (recent) rate is available, return false else true. 
/// @return rate The rate of the requested asset / pair / pool. 
function get( 
bytes calldata 
) external virtual returns (bool success, uint256 rate) { 


return (true, get()); 


/// @notice Check the last exchange rate without any state changes. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return success if no valid (recent) rate is available, return false else true. 
/// @return rate The rate of the requested asset / pair / pool. 
function peek( 


bytes calldata 


) external view virtual returns (bool success, uint256 rate) { 


return (true, get()); 


/// @notice Check the current spot exchange rate without any state changes. For oracles 
like TWAP this will be different from peek(). 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return rate The rate of the requested asset / pair / pool. 
function peekSpot( 
bytes calldata 
) external view virtual returns (uint256 rate) { 


return _get(); 


/// @notice Returns a human readable (short) name about this oracle. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return (string) A human readable symbol name about this oracle. 
function symbol(bytes calldata) external view returns (string memory) { 


return symbol; 


/// @notice Returns a human readable name about this oracle. 


/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return (string) A human readable name about this oracle. 
function name(bytes calldata) external view returns (string memory) { 


return name; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\oracle\interfaces/lAccessContr 
ol.sol---- 


// SPDX-License-Identifier: GPL-3.0 


pragma solidity “0.8.7; 


/// @title [AccessControl 
/// @author Forked from OpenZeppelin 
/// @notice Interface for `AccessControl` contracts 
interface [AccessControl { 
function hasRole( 
bytes32 role, 
address account 


) external view returns (bool); 


function getRoleAdmin(bytes32 role) external view returns (bytes32); 


function grantRole(bytes32 role, address account) external; 


function revokeRole(bytes32 role, address account) external; 


function renounceRole(bytes32 role, address account) external; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\oracle\interfaces/lOracle.sol---- 


// SPDX-License-Identifier: GPL-3.0 


pragma solidity *0.8.7; 


/// @title lOracle 

/// @author Angle Core Team 

/// @notice Interface for Angle's oracle contracts reading oracle rates from both UniswapV3 
and Chainlink 

/// from just UniswapV3 or from just Chainlink 

interface lOracle { 


function read() external view returns (uint256); 


function readAll() 


external 


view 


returns (uint256 lowerRate, uint256 upperRate); 


function readLower() external view returns (uint256); 


function readUpper() external view returns (uint256); 


function readQuote(uint256 baseAmount) external view returns (uint256); 


function readQuoteLower(uint256 baseAmount) external view returns (uint256); 


function inBase() external view returns (uint256); 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\oracle\modules/ModuleChainlin 
kMulti.sol---- 


// SPDX-License-Identifier: GPL-3.0 


pragma solidity “0.8.7; 


import "../utils/ChainlinkUtils.sol"; 


/// @title ModuleChainlinkMulti 
/// @author Angle Core Team 
/// @notice Module Contract that is going to be used to help compute Chainlink prices 
/// @dev This contract helps for an oracle using a Chainlink circuit composed of multiple 
pools 
/// @dev An oracle using Chainlink is either going to be a ~ModuleChainlinkSingle’ or a 
~ModuleChainlinkMulti> 
abstract contract ModuleChainlinkMulti is ChainlinkUtils { 

/// @notice Chanlink pools, the order of the pools has to be the order in which they are 
read for the computation 

/// of the price 

AggregatorV3Interface[] public circuitChainlink; 

/// @notice Whether each rate for the pairs in “circuitChainlinky should be multiplied or 
divided 

uint8[] public circuitChainIlsMultiplied; 

/// @notice Decimals for each Chainlink pairs 


uint8[] public chainlinkDecimals; 


/// @notice Constructor for an oracle using only Chainlink with multiple pools to read from 
/// @param _circuitChainlink Chainlink pool addresses (in order) 
/// @param _circuitChainlsMultiplied Whether we should multiply or divide by this rate 
when computing Chainlink price 
constructor( 
address[] memory _circuitChainlink, 
uint8[] memory _circuitChainlsMultiplied, 
uint32 _stalePeriod, 
address[] memory guardians 
) { 
uint256 circuitLength = _circuitChainlink.length; 
require(circuitLength > 0, "106"); 
require(circuitLength == _circuitChainlsMultiplied.length, "104"); 
// There is no `GOVERNOR_ROLE` in this contract, governor has `GUARDIAN_ROLE` 
require(guardians.length > 0, "101"); 
for (uint256 i = 0; i < guardians.length; i++) { 
require(guardians[i] != address(0), "0"); 
_setupRole(GUARDIAN_ROLE_CHAINLINK, guardians[i]); 


} 
_setRoleAdmin(GUARDIAN_ROLE_CHAINLINK, GUARDIAN_ROLE_CHAINLINK); 


for (uint256 i = 0; i < circuitLength; i++) { 
AggregatorV3Interface _pool = AggregatorV3Interface( 
_circuitChainlink[i] 
); 


circuitChainlink.push(_pool); 


chainlinkDecimals.push(_pool.decimals()); 


stalePeriod = _stalePeriod; 


circuitChainIsMultiplied = _circuitChainlsMultiplied; 


/// @notice Reads oracle price using Chainlink circuit 
/// @param quoteAmount The amount for which to compute the price expressed with base 
decimal 
/// @return The `quoteAmount` converted in `out-currency` 
/// @return The value obtained with the last Chainlink feed queried casted to uint 
/// @dev If *quoteAmount’ is ~BASE_TOKENS’, the output is the oracle rate 
function _quoteChainlink( 
uint256 quoteAmount 
) internal view returns (uint256, uint256) { 
uint256 castedRatio; 
// An invariant should be that *circuitChainlink.length > 0° otherwise ‘castedRatio = 0° 
for (uint256 i = 0; i < circuitChainlink.length; i++) { 
(quoteAmount, castedRatio) = _readChainlinkFeed( 
quoteAmount, 
circuitChainlink[i], 
circuitChainlsMultiplied[i], 
chainlinkDecimals[i], 


0 


} 


return (quoteAmount, castedRatio); 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\oracle\modules/ModuleChainlin 
kSingle.sol---- 


// SPDX-License-Identifier: GPL-3.0 


pragma solidity “0.8.7; 


import "../utils/ChainlinkUtils.sol"; 


/// @title ModuleChainlinkSingle 
/// @author Angle Core Team 
/// @notice Module Contract that is going to be used to help compute Chainlink prices 
/// @dev This contract will help for an oracle using a single Chainlink price 
/// @dev An oracle using Chainlink is either going to be a ~ModuleChainlinkSingle’ or a 
*ModuleChainlinkMulti> 
abstract contract ModuleChainlinkSingle is ChainlinkUtils { 
/// @notice Chainlink pool to look for in the contract 
AggregatorvV3Interface public immutable poolChainlink; 
/// @notice Whether the rate computed using the Chainlink pool should be multiplied to 
the quote amount or not 
uint8 public immutable isChainlinkMultiplied; 
/// @notice Decimals for each Chainlink pairs 


uint8 public immutable chainlinkDecimals; 


/// @notice Constructor for an oracle using only a single Chainlink 
/// @param _poolChainlink Chainlink pool address 


/// @param _isChainlinkMultiplied Whether we should multiply or divide the quote amount 


by the rate 
constructor( 
address _poolChainlink, 
uint8 _isChainlinkMultiplied, 
uint32 _stalePeriod, 
address[] memory guardians 
){ 
require(_poolChainlink != address(0), "105"); 
poolChainlink = AggregatorV3Interface(_poolChainlink); 
chainlinkDecimals = AggregatorV3Interface(_poolChainlink).decimals(); 
// There is no `GOVERNOR_ROLE` in this contract, governor has `GUARDIAN_ROLE` 
require(guardians.length > 0, "101"); 
for (uint256 i = 0; i < guardians.length; i++) { 
require(guardians[i] != address(0), "0"); 
_setupRole(GUARDIAN_ROLE_CHAINLINK, guardians[i]); 
} 
_setRoleAdmin(GUARDIAN_ROLE_CHAINLINK, GUARDIAN_ROLE_CHAINLINK); 


stalePeriod = _stalePeriod; 


isChainlinkMultiplied = _isChainlinkMultiplied; 


/// @notice Reads oracle price using a single Chainlink pool 
/// @param quoteAmount Amount expressed with base decimal 
/// @dev If *quoteAmount’ is base, the output is the oracle rate 


function _quoteChainlink( 


uint256 quoteAmount 
) internal view returns (uint256, uint256) { 
// No need for a for loop here as there is only a single pool we are looking at 
return 
_readChainlinkFeed( 

quoteAmount, 
poolChainlink, 
isChainlinkMultiplied, 
chainlinkDecimals, 


0 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\oracle\modules/ModuleUniswa 
pMulti.sol---- 


// SPDX-License-Identifier: GPL-3.0 


pragma solidity “0.8.7; 


import "../utils/UniswapUtils.sol"; 


/// @title ModuleUniswapMulti 
/// @author Angle Core Team 
/// @notice Module Contract that is going to be used to help compute Uniswap prices 
/// @dev This contract will help for an oracle using multiple UniswapV3 pools 
/// @dev An oracle using Uniswap is either going to be a “ModuleUniswapSingle’ or a 
*ModuleUniswapMulti- 
abstract contract ModuleUniswapMulti is UniswapUtils { 

/// @notice Uniswap pools, the order of the pools to arrive to the final price should be 
respected 

IUniswapV3Pool[] public circuitUniswap; 

/// @notice Whether the rate obtained with each pool should be multiplied or divided to 
the current amount 


uint8[] public circuitUnilsMultiplied; 


/// @notice Constructor for an oracle using multiple Uniswap pool 
/// @param _circuitUniswap Path of the Uniswap pools 
/// @param _circuitUnilsMultiplied Whether we should multiply or divide by this rate in the 


path 


/// @param _twapPeriod Time weighted average window, it is common for all Uniswap 
pools 
/// @param observationLength Number of observations that each pool should have stored 
/// @param guardians List of governor or guardian addresses 
constructor( 
IUniswapV3Pool[] memory _circuitUniswap, 
uint8[] memory _circuitUnilsMultiplied, 
uint32 _twapPeriod, 
uintl6 observationLength, 
address[] memory guardians 
){ 
// There is no `GOVERNOR_ROLE` in this contract, governor has `GUARDIAN_ROLE` 
require(guardians.length > 0, "101"); 
for (uint256 i = 0; i < guardians.length; i++) { 
require(guardians[i] != address(0), "0"); 
_setupRole(GUARDIAN_ ROLE UNISWAP, guardiansl[i]); 
} 
_setRoleAdmin(GUARDIAN_ROLE_UNISWAP, GUARDIAN _ROLE_UNISWAP); 


require(int32(_twapPeriod) > 0, "102"); 
uint256 circuitUniLength = _circuitUniswap.length; 
require(circuitUniLength > 0, "103"); 


require(circuitUniLength == _circuitUnilsMultiplied.length, "104"); 


twapPeriod = _twapPeriod; 


circuitUniswap = _circuitUniswap; 


circuitUnilsMultiplied = _circuitUnilsMultiplied; 


for (uint256 i = 0; i < circuitUniLength; i++) { 
circuitUniswap[i].increaseObservationCardinalityNext( 


observationLength 


/// @notice Reads Uniswap current block oracle rate 
/// @param quoteAmount The amount in the in-currency base to convert using the 
Uniswap oracle 
/// @return The value of the oracle of the initial amount is then expressed in the decimal 
from 
/// the end currency 
function quoteUniswap( 
uint256 quoteAmount 
) internal view returns (uint256) { 
for (uint256 i = 0; i < circuitUniswap.length; i++) { 
quoteAmount = _readUniswapPool( 
quoteAmount, 
circuitUniswap[i], 


circuitUnilsMultiplied[i] 


// The decimal here is the one from the end currency 


return quoteAmount; 


/// @notice Increases the number of observations for each Uniswap pools 
/// @param newLengthStored Size asked for 
/// @dev newLengthStored should be larger than all previous pools observations length 
function increaseTWAPStore(uintl6 newLengthStored) external { 
for (uint256 i = 0; i < circuitUniswap.length; i++) { 
circuitUniswap[i].increaseObservationCardinalityNext( 


newLengthStored 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\oracle\utils/ChainlinkUtils.sol--- 


// SPDX-License-lIdentifier: GPL-3.0 


pragma solidity “0.8.7; 


import "@chainlink/contracts/src/v0.8/interfaces/AggregatorV3Interface.sol"; 


import "../external/AccessControl.sol"; 


/// @title ChainlinkUtils 
/// @author Angle Core Team 
/// @notice Utility contract that is used across the different module contracts using Chainlink 
abstract contract ChainlinkUtils is AccessControl { 

/// @notice Represent the maximum amount of time (in seconds) between each Chainlink 
update 

/// before the price feed is considered stale 


uint32 public stalePeriod; 


// Role for guardians and governors 


bytes32 public constant GUARDIAN_ROLE_CHAINLINK = 


keccak256("GUARDIAN_ROLE"); 


error InvalidChainlinkRate(); 


/// @notice Reads a Chainlink feed using a quote amount and converts the quote amount 


to 


/// the out-currency 
/// @param quoteAmount The amount for which to compute the price expressed with base 
decimal 
/// @param feed Chainlink feed to query 
/// @param multiplied Whether the ratio outputted by Chainlink should be multiplied or 
divided 
/// to the ~quoteAmount™ 
/// @param decimals Number of decimals of the corresponding Chainlink pair 
/// @param castedRatio Whether a previous rate has already been computed for this feed 
/// This is mostly used in the ~_changeUniswapNotFinal’ function of the oracles 
/// @return The `quoteAmount` converted in out-currency (computed using the second 
return value) 
/// @return The value obtained with the Chainlink feed queried casted to uint 
function _readChainlinkFeed( 
uint256 quoteAmount, 
AggregatorV3Interface feed, 
uint8 multiplied, 
uint256 decimals, 
uint256 castedRatio 
) internal view returns (uint256, uint256) { 
if (castedRatio == 0) { 
( 
uint80 roundld, 
int256 ratio, 


P: 


uint256 updatedAt, 


uint80 answeredinRound 
) = feed.latestRoundData(); 
if ( 
ratio <= 0 || 
roundild > answeredIinRound || 
block.timestamp - updatedAt > stalePeriod 
) revert InvalidChainlinkRate(); 
castedRatio = uint256(ratio); 
} 
// Checking whether we should multiply or divide by the ratio computed 
if (multiplied == 1) 
quoteAmount = (quoteAmount * castedRatio) / (10 ** decimals); 
else quoteAmount = (quoteAmount * (10 ** decimals)) / castedRatio; 


return (quoteAmount, castedRatio); 


/// @notice Changes the Stale Period 
/// @param _stalePeriod New stale period (in seconds) 
function changeStalePeriod( 
uint32 _stalePeriod 
) external onlyRole(GUARDIAN_ROLE_CHAINLINK) { 


stalePeriod = _stalePeriod; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\oracle\utils/FunctionUtils.sol---- 


// SPDX-License-Identifier: GPL-3.0 


pragma solidity “0.8.7; 


/// @title FunctionUtils 
/// @author Angle Core Team 
/// @notice Contains all the utility functions that are needed in different places of the 
protocol 
/// @dev Functions in this contract should typically be pure functions 
/// @dev This contract is voluntarily a contract and not a library to save some gas cost every 
time it is used 
contract Functionutils { 

/// @notice Base that is used to compute ratios and floating numbers 

uint256 public constant BASE_TOKENS = 10 ** 18; 

/// @notice Base that is used to define parameters that need to have a floating value (for 
instance parameters 

/// that are defined as ratios) 


uint256 public constant BASE PARAMS = 10 ** 9; 


/// @notice Computes the value of a linear by part function at a given point 
/// @param x Point of the function we want to compute 
/// @param xArray List of breaking points (in ascending order) that define the linear by 
part function 
/// @param yArray List of values at breaking points (not necessarily in ascending order) 


/// @dev The evolution of the linear by part function between two breaking points is linear 


/// @dev Before the first breaking point and after the last one, the function is constant 
with a value 
/// equal to the first or last value of the yArray 
/// @dev This function is relevant if *x is between O and “~BASE PARAMS’. If `x` is greater 
than that, then 
/// everything will be as if `x`ò is equal to the greater element of the `xArray` 
function _piecewiseLinear( 
uint64 x, 
uint64[] memory xArray, 
uint64[] memory yArray 
) internal pure returns (uint64) { 
if (x >= xArray[xArray.length - 1]) { 
return yArray[xArray.length - 1]; 
} else if (x <= xArray[0]) { 
return yArray[0]; 
} else { 
uint256 lower; 
uint256 upper = xArray.length - 1; 
uint256 mid; 
while (upper - lower > 1) { 
mid = lower + (upper - lower) / 2; 
if (xArray[mid] <= x) { 
lower = mid; 
} else { 


upper = mid; 


} 
if (yArray[upper] > yArray[lower]) { 
// There is no risk of overflow here as in the product of the difference of ` y` 


// with the difference of `x`, the product is inferior to ‘BASE PARAMS**2* which 


does not 
// overflow for *uint64° 
return 
yArray[lower] + 
((yArray[upper] - yArray[lower]) * (x - xArray[lower])) / 
(xArray[upper] - xArray[lower]); 
} else { 
return 
yArray[lower] - 
((yArray[lower] - yArray[upper]) * (x - xArray[lower])) / 
(xArray[upper] - xArray[lower]); 
i 
} 
j; 


/// @notice Checks if the input arrays given by governance to update the fee structure is 
valid 

/// @param xArray List of breaking points (in ascending order) that define the linear by 
part function 

/// @param yArray List of values at breaking points (not necessarily in ascending order) 

/// @dev This function is a way to avoid some governance attacks or errors 


/// @dev The modifier checks if the arrays have a non null length, if their length is the 


same, if the values 
/// in the `xArray`ò are in ascending order and if the values in the `xArray`ò and in the 
“yArray are not superior 
/// to “~BASE_PARAMS* 
modifier onlyCompatiblelnputArrays( 
uint64[] memory xArray, 
uint64[] memory yArray 
){ 
require(xArray.length == yArray.length && xArray.length > 0, "5"); 
for (uint256 i = 0; i <= yArray.length - 1; i++) { 
require( 
yArray[i] <= uint64(BASE PARAMS) && 
xArray[i] <= uint64(BASE PARAMS), 
ug" 
); 
if (i > O) { 


require(xArray[i] > xArray[i- 1], "7"); 


/// @notice Checks if the new value given for the parameter is consistent (it should be 
inferior to 1 
/// if it corresponds to a ratio) 


/// @param fees Value of the new parameter to check 


modifier onlyCompatibleFees(uint64 fees) { 


require(fees <= BASE PARAMS, "4"); 


/// @notice Checks if the new address given is not null 
/// @param newAddress Address to check 
IlI @dev Reference: 
https://github.com/crytic/slither/wiki/Detector-Documentation#missing-zero-address-validati 
on 
modifier zeroCheck(address newAddress) { 


require(newAddress != address(0), "0"); 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\oracle\utils/OracleMath.sol---- 


// SPDX-License-Identifier: GPL-3.0 


pragma solidity “0.8.7; 


import "../external/FullMath.sol"; 


/// @title OracleMath 
III @author Forked and adapted by Angle Core Team from 
https://github.com/Uniswap/uniswap-v3-core/blob/main/contracts/libraries/TickMath.sol 
/// @notice Math library for computing prices from ticks 
/// @dev Computes price for ticks of size 1.0001, i.e. sqaqrt(1.0001^tick). Supports 
/// prices between 2**-128 and 2**128 
contract OracleMath is FullMath { 
/// @dev Maximum tick that may be passed to *_getSqrtRatioAtTick computed from log 
base 1.0001 of 2**128 


int24 internal constant MAX_TICK = 887272; 


/// @notice Given a tick and a token amount, calculates the amount of token received in 
exchange 
/// @param tick Tick value used to calculate the quote 
/// @param baseAmount Amount of token to be converted 
/// @param multiply Boolean representing whether the `baseToken` has a lower address 
than the `quoteToken` 
/// @return quoteAmount Amount of ~“quoteToken* received for ~baseAmount’ of 


` baseToken` 


function getQuoteAtTick( 
int24 tick, 
uint256 baseAmount, 
uint256 multiply 
) internal pure returns (uint256 quoteAmount) { 


uint256 ratio = _getRatioAtTick(tick); 


quoteAmount = (multiply == 1) 
? mulDiv(ratio, baseAmount, 1e18) 


: mulDiv(1e18, baseAmount, ratio); 


/// @notice Calculates 1.0001*tick * in out ERC20 decimals 
/// @dev Adapted from Uniswap ~_getSqrtRatioAtTick but we don't consider the square 
root 
/// anymore but directly the full rate 
/// @dev Throws if *|tick] > max tick 
/// @param tick The input tick for the above formula 
/// @return rate uint256 representing the ratio of the two assets `(token1/token0) * 
10**decimals(token1)° 
/// at the given tick 
function getRatioAtTick(int24 tick) internal pure returns (uint256 rate) { 
uint256 absTick = tick < 0 
? uint256(-int256(tick)) 
: uint256(int256(tick)); 


require(absTick <= uint256(int256(_MAX_TICK)), "T"); 


uint256 ratio = absTick & 0x1 != 0 

? Oxfff97272373d413259a46990580e213a 

: 0x100000000000000000000000000000000; 
if (absTick & Ox2 != 0) 

ratio = (ratio * Oxfff2e50f5f656932ef12357cf3c7fdcc) >> 128; 
if (absTick & 0x4 != 0) 

ratio = (ratio * Oxffe5caca7e10e4e61c3624eaa0941cd0) >> 128; 
if (absTick & 0x8 != 0) 

ratio = (ratio * Oxffcb9843d60f6159c9db58835c926644) >> 128; 
if (absTick & 0x10 != 0) 

ratio = (ratio * Oxff973b41fa98c081472e6896dfb254c0) >> 128; 
if (absTick & 0x20 != 0) 

ratio = (ratio * Oxff2eal6466c96a3843ec78b326b52861) >> 128; 
if (absTick & 0x40 != 0) 

ratio = (ratio * Oxfe5dee046a99a2a811cC461f1969c3053) >> 128; 
if (absTick & 0x80 != 0) 

ratio = (ratio * Oxfcbe86c7900a88aedcffc83b479aa3a4) >> 128; 
if (absTick & 0x100 != 0) 

ratio = (ratio * Oxf987a7253ac413176f2b074cf7815e54) >> 128; 
if (absTick & 0x200 != 0) 

ratio = (ratio * Oxf3392b0822b70005940c7a398e4b70f3) >> 128; 
if (absTick & 0x400 != 0) 

ratio = (ratio * 0xe7159475a2c29b7443b29c7fa6e889d9) >> 128; 
if (absTick & 0x800 != 0) 


ratio = (ratio * Oxd097f3bdfd2022b8845ad8f792aa5825) >> 128; 


if (absTick & 0x1000 != 0) 

ratio = (ratio * Oxa9f746462d870fdf8a65dc1f90e061e5) >> 128; 
if (absTick & 0x2000 != 0) 

ratio = (ratio * 0Ox70d869a156d2alb890bb3df62baf32f7) >> 128; 
if (absTick & 0x4000 != 0) 

ratio = (ratio * 0x31be135f97d08fd981231505542fcfa6) >> 128; 
if (absTick & 0x8000 != 0) 

ratio = (ratio * 0x9aa508b5b7a84e1c677de54f3e99bc9) >> 128; 
if (absTick & 0x10000 != 0) 

ratio = (ratio * Ox5d6af8dedb81196699c329225ee604) >> 128; 
if (absTick & 0x20000 != 0) 

ratio = (ratio * 0x2216e584f5falea926041bedfe98) >> 128; 
if (absTick & 0x40000 != 0) 

ratio = (ratio * 0x48a170391f7dc42444e8fa2) >> 128; 


if (absTick & 0x80000 != 0) ratio = (ratio * 0x149b34ee7ac262) >> 128; 


if (tick > 0) ratio = type(uint256).max / ratio; 


// We need to modify the 96 decimal to be able to convert it to a D256 
// 2**59 ~ 10**18 (thus we guarantee the same precision) and 128-59 = 69 
// We retrieve a Q128.59 decimal. --> we have 69 bits free to reach the uint256 limit. 


// Now, 2**69 >> 10**18 so we are safe in the Decimal conversion. 


uint256 price = uint256( 


(ratio >> 69) + (ratio % (1 << 69) == 0? 0:1) 


rate = ((price * 1e18) >> 59); 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\oracle\utils/PausableMapUpgra 
deable.sol---- 


// SPDX-License-Identifier: GPL-3.0 


pragma solidity “0.8.7; 


/// @title PausableMap 
/// @author Angle Core Team after a fork from OpenZeppelin's similar Pausable Contracts 
/// @notice Contract module which allows children to implement an emergency stop 
/// mechanism that can be triggered by an authorized account. 
/// @notice It generalizes Pausable from OpenZeppelin by allowing to specify a bytes32 that 
/// should be stopped 
/// @dev This module is used through inheritance 
/// @dev In Angle's protocol, this contract is mainly used in *StableMasterFront® 
/// to prevent SLPs and new stable holders from coming in 
/// @dev The modifiers `whenNotPaused`ò and `whenPaused` from the original OpenZeppelin 
contracts were removed 
/// to save some space and because they are not used in the “StableMaster’ contract where 
this contract 
/// is imported 
contract PausableMapUpgradeable { 
/// @dev Emitted when the pause is triggered for `name` 


event Paused(bytes32 name); 


/// @dev Emitted when the pause is lifted for `name` 


event Unpaused(bytes32 name); 


/// @dev Mapping between a name and a boolean representing the paused state 


mapping(bytes32 => bool) public paused; 


/// @notice Triggers stopped state for “name” 
/// @param name Name for which to pause the contract 
/// @dev The contract must not be paused for `name` 
function pause(bytes32 name) internal { 
require(!paused[name], "18"); 
paused[name] = true; 


emit Paused(name); 


/// @notice Returns to normal state for `name` 
/// @param name Name for which to unpause the contract 
/// @dev The contract must be paused for `name` 
function unpause(bytes32 name) internal { 
require(paused[name], "19"); 
paused[name] = false; 


emit Unpaused(name); 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\oracle\utils/UniswapUtils.sol---- 


// SPDX-License-Identifier: GPL-3.0 


pragma solidity “0.8.7; 


import "@uniswap/v3-core/contracts/interfaces/IUniswapV3Pool.sol"; 


import "../external/AccessControl.sol"; 


import "./OracleMath.sol"; 


/// @title UniswapUtils 

/// @author Angle Core Team 

/// @notice Utility contract that is used in the Uniswap module contract 
abstract contract UniswapUtils is AccessControl, OracleMath { 


// The parameters below are common among the different Uniswap modules contracts 


/// @notice Time weigthed average window that should be used for each Uniswap rate 
/// It is mainly going to be 5 minutes in the protocol 


uint32 public twapPeriod; 


// Role for guardians and governors 


bytes32 public constant GUARDIAN_ROLE_UNISWAP = keccak256("GUARDIAN_ROLE"); 


/// @notice Gets a quote for an amount of in-currency using UniswapV3 TWAP and 
converts this 


/// amount to out-currency 


/// @param quoteAmount The amount to convert in the out-currency 
/// @param pool UniswapV3 pool to query 
/// @param isUniMultiplied Whether the rate corresponding to the Uniswap pool should be 
multiplied or divided 
/// @return The value of the `quoteAmount` expressed in out-currency 
function _readUniswapPool( 
uint256 quoteAmount, 
IUniswapV3Pool pool, 
uint8 isUniMultiplied 
) internal view returns (uint256) { 


uint32[] memory secondAgos = new uint32[](2); 


secondAgos[0] = twapPeriod; 


secondAgos[1] = 0; 


(int56[] memory tickCumulatives, ) = pool.observe(SsecondAgos); 


int56 tickCumulativesDelta = tickCumulatives[1] - tickCumulatives[0]; 


int24 timeWeightedAverageTick = int24( 


tickCumulativesDelta / int32(twapPeriod) 


// Always round to negative infinity 
if ( 
tickCumulativesDelta < 0 && 


(tickCumulativesDelta % int56(int32(twapPeriod)) != 0) 


) timeWeightedAverageTick--; 


// Computing the `quoteAmount` from the ticks obtained from Uniswap 
return 
_getQuoteAtTick( 
timeWeightedAverageTick, 
quoteAmount, 


isUniMultiplied 


/// @notice Changes the TWAP period 
/// @param _twapPeriod New window to compute the TWAP 
function changeTwapPeriod( 
uint32 _twapPeriod 
) external onlyRole(GUARDIAN_ROLE_UNISWAP) { 
require(int32(_twapPeriod) > 0, "99"); 


twapPeriod = _twapPeriod; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\Swapper/BaseSwapper.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


import "@openzeppelin/contracts/access/Ownable.sol"; 
import "@openzeppelin/contracts/security/ReentrancyGuard.sol"; 
import "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol"; 


import "tapioca-sdk/dist/contracts/YieldBox/contracts/interfaces/lYieldBox.sol"; 


import "../interfaces/ISwapper.sol"; 


abstract contract BaseSwapper is Ownable, ReentrancyGuard, ISwapper { 


using SafeERC20 for IERC20; 


// xkkK kkk 


error AddressNotValid(); 


modifier validAddress(address addr) { 


if (addr == address(0)) revert AddressNotValid(); 


/// *** VIEW METHODS *** 


function buildSwapData( 


address tokenIn, 
address tokenOut, 
uint256 amountin, 
uint256 shareln, 
bool withdrawFromYb, 
bool depositToYb 
) external pure override returns (SwapData memory) { 
return 
_buildSwapData( 
tokenlIn, 
tokenOut, 
O, 
O, 
amountin, 
shareln, 
withdrawFromYb, 


depositToYb 


function buildSwapData( 
uint256 tokenInld, 
uint256 tokenOutld, 
uint256 amountin, 
uint256 shareln, 


bool withdrawFromyYb, 


bool depositToYb 
) external pure override returns (SwapData memory) { 
return 
_buildSwapData( 

address(0), 
address(0), 
tokenInld, 
tokenOutld, 
amountin, 
Shareln, 
withdrawFromYb, 


depositToYb 


/// *** INTERNAL METHODS *** 
function _buildSwapData( 
address tokenIn, 
address tokenOut, 
uint256 tokenInld, 
uint256 tokenOutld, 
uint256 amountin, 
uint256 shareln, 
bool withdrawFromYb, 


bool depositToYb 


) internal pure returns (ISwapper.SwapData memory swapData) { 
ISwapper.SwapAmountData memory swapAmountData; 
swapAmountData.amountin = amountin; 


swapAmountData.shareln = shareln; 


ISwapper.SwapTokensData memory swapTokenData; 
swapTokenData.tokenIn = tokenIn; 
swapTokenData.tokenOut = tokenOut; 
swapTokenData.tokenInIid = tokenInld; 


swapTokenData.tokenOutld = tokenOutld; 


ISwapper.YieldBoxData memory swapYBData; 
swapYBData.withdrawFromyYb = withdrawFromyYb; 


swapYBData.depositToYb = depositToYb; 


sSwapData.tokensData = swapTokenData; 
swapData.amountData = swapAmountData; 


swapData.yieldBoxData = swapYBData; 


function safeApprove(address token, address to, uint256 value) internal { 
(bool success, bytes memory data) = token.call( 
abi.encodeWithSelector(0x095ea7b3, to, value) 
); 
require( 


success && (data.length == 0 || abi.decode(data, (bool))), 


"BaseSwapper::safeApprove: approve failed" 


function getTokens( 
ISwapper.SwapTokensData calldata tokens, 
lYieldBox _yieldBox 
) internal view returns (address tokenIn, address tokenOut) { 
if (tokens.tokenIn != address(0) || tokens.tokenOut != address(0)) { 
tokenIn = tokens.tokenIn; 
tokenOut = tokens.tokenOut; 
} else { 
(, tokenIn, , ) = _yieldBox.assets(tokens.tokenInld); 


(, tokenOut, , ) = _yieldBox.assets(tokens.tokenOutld); 


function getAmounts( 
ISwapper.SwapAmountData calldata amounts, 
uint256 tokenInld, 
uint256 tokenOutld, 
lYieldBox _yieldBox 
) internal view returns (uint256 amountin, uint256 amountOut) { 
if (amounts.amountin > 0 || amounts.amountOut > 0) { 
amountin = amounts.amountin; 


amountOut = amounts.amountOut; 


} else { 
if (tokenInId > 0) { 
amountin = amounts.amountin == 
? _yieldBox.toAmount(tokenInid, amounts.shareln, false) 
: amounts.amountin; 
} 
if (tokenOutld > 0) { 
amountOut = amounts.amountOut == 
? _yieldBox.toAmount(tokenOutld, amounts.shareOut, false) 


: amounts.amountOut; 


function extractTokens( 
ISwapper.YieldBoxData calldata ybData, 
lYieldBox _yieldBox, 
address token, 
uint256 tokenld, 
uint256 amount, 
uint256 share 
) internal returns (uint256) { 
if (yoData.withdrawFromyYb) { 
(amount, share) = _yieldBox.withdraw( 
tokenld, 


address(this), 


address(this), 
amount, 
share 
); 
return amount; 
} 
IERC20(token).safeTransferFrom(msg.sender, address(this), amount); 


return amount; 


function _createPath( 
address tokenlin, 
address tokenOut 
) internal pure returns (address[] memory path) { 
path = new address[](2); 
path[0] = tokenin; 


path[1] = tokenOut; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\Swapper/CurveSwapper.sol---- 


// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.18; 


import "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol"; 
import "./interfaces/ICurvePool.sol"; 


import "./BaseSwapper.sol"; 
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/// @title Curve pool swapper 


contract CurveSwapper is BaseSwapper { 


using SafeERC20 for IERC20; 


ICurvePool public curvePool; 


lYieldBox public immutable yieldBox; 


error Undefined(); 


error Notimplemented(); 


V\\\ V/NM\\_I\ V/N\ \\ 
/\\\\\\\\\\___V/A\\WW. V//IA\\\\\\_\V\\\___ 
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constructor( 
ICurvePool curvePool, 
lYieldBox _yieldBox 

) validAddress(address(_curvePool)) validAddress(address(_yieldBox)) { 
curvePool = _curvePool; 


yieldBox = _yieldBox; 


/// *** VIEW METHODS *** 
// KK KKK 
/// @notice returns default bytes swap data 
function getDefaultDexOptions() 
public 
pure 
override 


returns (bytes memory) 


revert Undefined(); 


/// @notice Computes amount out for amount in 
[I| @param swapData operation data 
/// @param dexOptions AMM data 
function getOutputAmount( 
SwapData calldata swapData, 


bytes calldata dexOptions 


) external view override returns (uint256 amountOut) { 


uint256[] memory tokenIndexes = abi.decode(dexOptions, (uint256[])); 


(uint256 amountin, ) = _getAmounts( 
swapData.amountData, 
swapData.tokensData.tokenInld, 
swapData.tokensData.tokenOutld, 
yieldBox 

); 

amountOut = curvePool.get_dy( 
int128(int256(tokenIndexes[0])), 
int128(int256(tokenIndexes[1])), 


amountin 


/// @notice Comutes amount in for amount out 
function getInputAmount( 

SwapData calldata, 

bytes calldata 
) external pure returns (uint256) { 


revert Notimplemented(); 


/// *** PUBLIC METHODS *** 


// RK kkk 


/// @notice swaps amount in 
/// @param swapData operation data 
/// @param amountOutMin min amount out to receive 
/// @param to receiver address 
/// @param data AMM data 
function swap( 
SwapData calldata swapData, 
uint256 amountOutMin, 
address to, 
bytes memory data 
) external override returns (uint256 amountOut, uint256 shareOut) { 
// Get Curve tokens' indexes & addresses 
uint256[] memory tokenIndexes = abi.decode(data, (uint256[])); 
address tokenIn = curvePool.coins(tokenIndexes[0]); 


address tokenOut = curvePool.coins(tokenIndexes[1]); 


// Get tokens' amounts 

(uint256 amountin, ) = _getAmounts( 
swapData.amountData, 
swapData.tokensData.tokenInld, 
swapData.tokensData.tokenOutld, 


yieldBox 


// Retrieve tokens from sender or from YieldBox 


amountin = _extractTokens( 
swapData.yieldBoxData, 
yieldBox, 
tokenIn, 
swapData.tokensData.tokenInld, 
amountin, 


swapData.amountData.shareln 


// Swap & compute output 
amountOut = _swapTokensForTokens( 
int128(int256(tokenIndexes[0])), 
intl28(int256(tokenIndexes[1])), 
amountin, 
amountOutMin 
); 
if (swapData.yieldBoxData.depositToYb) { 
_safeApprove(tokenOut, address(yieldBox), amountOut); 
(, shareOut) = yieldBox.depositAsset( 
swapData.tokensData.tokenOutld, 
address(this), 
to, 


amountOut, 


} else { 


IERC20(tokenOut).safeTransfer(to, amountOut); 


/// *** PRIVATE METHODS *** 
II RK KKK 
function _swapTokensForTokens( 
int128 i, 
int128 j, 
uint256 amountin, 
uint256 amountOutMin 
) private returns (uint256) { 
address tokenIn = curvePool.coins(uint256(uint128(i))); 


address tokenOut = curvePool.coins(uint256(uint128(j))); 


uint256 outputAmount = curvePool.get_dy(i, j, amountin); 


require(outputAmount >= amountOutMin, "insufficient-amount-out"); 


uint256 balanceBefore = IERC20(tokenOut).balanceOf(address(this)); 


_safeApprove(tokenIn, address(curvePool), amountin); 


curvePool.exchanga(i, j, amountin, amountOutMin); 


uint256 balanceAfter = IERC20(tokenOut).balanceOf(address(this)); 


require(balanceAfter > balanceBefore, "swap failed"); 


return balanceAfter - balanceBefore; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\Swapper/UniswapV2Swapper.s 
ol---- 
// SPDX-License-lIdentifier: UNLICENSED 


pragma solidity *0.8.18; 


import "./interfaces/IUniswapV2Factory.sol"; 
import "./interfaces/IUniswapV2Router02.sol"; 


import "./BaseSwapper.sol"; 
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*/ 


contract UniswapV2Swapper is BaseSwapper { 


using SafeERC20 for IERC20; 


IlUniswapV2Router02 public immutable swapRouter; 
IlUniswapV2Factory public immutable factory; 


lYieldBox public immutable yieldBox; 


constructor( 
address router, 
address factory, 


lYieldBox _yieldBox 


validAddress(_router) 
validAddress(_factory) 


validAddress(address(_yieldBox)) 


swapRouter = [UniswapV2Router02(_router); 
factory = I[UniswapV2Factory(_factory); 


yieldBox = _yieldBox; 


/// *** VIEW METHODS *** 


/// @notice returns default bytes swap data 


function getDefaultDexOptions() 


public 
view 
override 


returns (bytes memory) 


return abi.encode(block.timestamp + 1 hours); 


/// @notice Computes amount out for amount in 


[I| @param swapData operation data 


function getOutputAmount( 


SwapData calldata swapData, 


bytes calldata 


) external view override returns (uint256 amountOut) { 

(address tokenIn, address tokenOut) = _getTokens( 
swapData.tokensData, 
yieldBox 

); 

address[] memory path = _createPath(tokenIn, tokenOut); 

(uint256 amountin, ) = _getAmounts( 
swapData.amountData, 
swapData.tokensData.tokenInld, 
swapData.tokensData.tokenOutld, 


yieldBox 


uint256[] memory amounts = swapRouter.getAmountsOut(amountin, path); 


amountOut = amounts[1]; 


/// @notice Comutes amount in for amount out 
function getInputAmount( 
SwapData calldata swapData, 
bytes calldata 
) external view override returns (uint256 amountin) { 
(address tokenIn, address tokenOut) = _getTokens( 
swapData.tokensData, 


yieldBox 


address[] memory path = _createPath(tokenIn, tokenOut); 

(, uint256 amountOut) = _getAmounts( 
swapData.amountData, 
swapData.tokensData.tokenInld, 
swapData.tokensData.tokenOutld, 


yieldBox 


uint256[] memory amounts = swapRouter.getAmountsIn(amountOut, path); 


amountin = amounts[0]; 


/// *** PUBLIC METHODS *** 


// xkxkK kkk 


/// @notice swaps amount in 
/// @param swapData operation data 
/// @param amountOutMin min amount out to receive 
/// @param to receiver address 
/// @param data AMM data 
function swap( 
SwapData calldata swapData, 
uint256 amountOutMin, 
address to, 


bytes memory data 


external 
override 
nonReentrant 


returns (uint256 amountOut, uint256 shareOut) 


// Get tokens' addresses 
(address tokenIn, address tokenOut) = _getTokens( 
swapData.tokensData, 


yieldBox 


// Create swap path for UniswapV2Router02 operations 


address[] memory path = _createPath(tokenIn, tokenOut); 


// Get tokens' amounts 

(uint256 amountin, ) = _getAmounts( 
swapData.amountData, 
swapData.tokensData.tokenInld, 
swapData.tokensData.tokenOutld, 


yieldBox 


// Retrieve tokens from sender or from YieldBox 
amountin = _extractTokens( 
swapData.yieldBoxData, 


yieldBox, 


tokenlIn, 
swapData.tokensData.tokenInld, 
amountin, 


swapData.amountData.shareln 


// Perform the swap operation 
_safeApprove(tokenIn, address(SwapRouter), amountlin); 
if (data.length == 0) { 
data = getDefaultDexOptions(); 
} 
uint256 deadline = abi.decode(data, (uint256)); 
uint256[] memory amounts = swapRouter.swapExactTokensForTokens( 
amountin, 
amountOutMin, 
path, 
swapData.yieldBoxData.depositToYb ? address(this) : to, 


deadline 


// Compute outputs 

amountOut = amounts[1]; 

if (swapData.yieldBoxData.depositToYb) { 
_safeApprove(path[path.length - 1], address(yieldBox), amountOut); 
(, shareOut) = yieldBox.depositAsset( 


swapData.tokensData.tokenOutld, 


address(this), 
to, 
amountOut, 


0 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\Swapper/UniswapV3Swapper.s 
ol---- 
// SPDX-License-Identifier: GPL-2.0-or-later 


pragma solidity *0.8.18; 


import "@uniswap/v3-periphery/contracts/interfaces/ISwapRouter.sol"; 
import "@uniswap/v3-core/contracts/interfaces/IUniswapV3Pool.sol"; 
import "@uniswap/v3-core/contracts/interfaces/IUniswapV3Factory.sol"; 
import "@uniswap/v3-periphery/contracts/libraries/TransferHelper.sol"; 
import "@uniswap/v3-periphery/contracts/interfaces/IQuoterV2.sol"; 


import "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol"; 


import "./libraries/OracleLibrary.sol"; 


import "./BaseSwapper.sol"; 
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/// @title UniswapV3 swapper contract 
contract UniswapV3Swapper is BaseSwapper { 


using SafeERC20 for IERC20; 


lYieldBox private immutable yieldBox; 
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ISwapRouter public immutable swapRouter; 


IUniswapV3Factory public immutable factory; 


uint24 public poolFee = 3000; 


// °°" EVENTS *** // 


event PoolFee(uint256 old, uint256 new); 


constructor( 
lYieldBox _yieldBox, 
ISwapRouter swapRouter, 


lUniswapV3Factory _factory 


validAddress(address(_yieldBox)) 
validAddress(address(_swapRouter)) 


validAddress(address(_factory)) 


yieldBox = _yieldBox; 
swapRouter = swapRouter; 


factory = _factory; 


/// *** OWNER METHODS *** 


// KK kkk 


function setPoolFee(uint24 newFee) external onlyOwner { 
emit PoolFee(poolFee, newFee); 


poolFee = _newFee; 


/// *** VIEW METHODS *** 
// xkKkK KKK 
/// @notice returns default bytes swap data 
function getDefaultDexOptions() 
public 
view 
override 


returns (bytes memory) 


return abi.encode(block.timestamp + 1 hours); 


/// @notice Computes amount out for amount in 

[I| @param swapData operation data 

function getOutputAmount( 
SwapData calldata swapData, 
bytes calldata 

) external view override returns (uint256 amountOut) { 
(address tokenIn, address tokenOut) = _getTokens( 

swapData.tokensData, 


yieldBox 


(uint256 amountin, ) = _getAmounts( 
swapData.amountData, 
swapData.tokensData.tokenInld, 
swapData.tokensData.tokenOutld, 


yieldBox 


address pool = factory.getPool(tokenIn, tokenOut, poolFee); 


(int24 tick, ) = OracleLibrary.consult(pool, 60); 


amountOut = OracleLibrary.getQuoteAtTick( 
tick, 
uintl28(amountin), 
tokenIn, 


tokenOut 


/// @notice Comutes amount in for amount out 
function getInputAmount( 

SwapData calldata swapData, 

bytes calldata 
) external view override returns (uint256 amountin) { 


(address tokenIn, address tokenOut) = _getTokens( 


swapData.tokensData, 


yieldBox 


(, uint256 amountOut) = _getAmounts( 
swapData.amountData, 
swapData.tokensData.tokenInld, 
swapData.tokensData.tokenOutld, 


yieldBox 


address pool = factory.getPool(tokenIn, tokenOut, poolFee); 


(int24 tick, ) = OracleLibrary.consult(pool, 60); 
amountin = OracleLibrary.getQuoteAtTick( 
tick, 
uintl28(amountOut), 
tokenOut, 


tokenIn 


/// *** PUBLIC METHODS *** 


II KKK kkk 


/// @notice swaps amount in 


/// @param swapData operation data 


/// @param amountOutMin min amount out to receive 
/// @param to receiver address 
/// @param data AMM data 
function swap( 
SwapData calldata swapData, 
uint256 amountOutMin, 
address to, 
bytes memory data 
) external override returns (uint256 amountOut, uint256 shareOut) { 
// Get tokens' addresses 
(address tokenIn, address tokenOut) = _getTokens( 
swapData.tokensData, 


yieldBox 


// Get tokens' amounts 

(uint256 amountin, ) = _getAmounts( 
swapData.amountData, 
swapData.tokensData.tokenInld, 
swapData.tokensData.tokenOutld, 


yieldBox 


// Retrieve tokens from sender or from YieldBox 
amountin = _extractTokens( 


swapData.yieldBoxData, 


yieldBox, 

tokenIn, 
swapData.tokensData.tokenInld, 
amountin, 


swapData.amountData.shareln 


TransferHelper.safeApprove(tokenIn, address(SwapRouter), amountin); 


// Perform the swap operation 
if (data.length == 0) { 

data = getDefaultDexOptions(); 
} 


uint256 deadline = abi.decode(data, (uint256)); 


ISwapRouter.ExactInputSingleParams memory params = |SwapRouter 
.ExactInputSingleParams({ 
tokenIn: tokenin, 
tokenOut: tokenOut, 
fee: poolFee, 
recipient: swapData.yieldBoxData.depositToYb 
? address(this) 
: to, 
deadline: deadline, 
amountin: amountin, 


amountOutMinimum: amountOutMin, 


sqrtPriceLimitX96: 0 


H; 


// Compute outputs 
amountOut = swapRouter.exactinputSingle(params); 
if (swapData.yieldBoxData.depositToYb) { 
_safeApprove(tokenOut, address(yieldBox), amountOut); 
(, shareOut) = yieldBox.depositAsset( 
swapData.tokensData.tokenOutld, 
address(this), 
to, 
amountOut, 


0 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\Swapper\interfaces/ICurvePool. 
sol---- 
// SPDX-License-ldentifier: UNLICENSED 


pragma solidity *0.8.18; 


// solhint-disable func-name-mixedcase 


// solhint-disable var-name-mixedcase 


interface ICurvePool { 


function coins(uint256 i) external view returns (address); 


function get_dy( 


int128 i, 


int128 j, 


uint256 dx 


) external view returns (uint256); 


function exchange(int128 i, int128 j, uint256 dx, uint256 min_dy) external; 


function get_virtual_price() external view returns (uint256); 


function gamma() external view returns (uint256); 


function A() external view returns (uint256); 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\Swapper\interfaces/IUniswapV 
2Factory.sol---- 


// SPDX-License-Identifier: UNLICENSED 


pragma solidity >=0.5.0; 


interface IUniswapV2Factory { 
event PairCreated( 
address indexed tokenO, 
address indexed tokenl, 
address pair, 


uint256 


function feeTo() external view returns (address); 


function feeToSetter() external view returns (address); 


function getPair( 


address tokenA, 


address tokenB 


) external view returns (address pair); 


function allPairs(uint256) external view returns (address pair); 


function allPairsLength() external view returns (uint256); 


function createPair( 
address tokenA, 
address tokenB 


) external returns (address pair); 


function setFeeTo(address) external; 


function setFeeToSetter(address) external; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\Swapper\interfaces/IUniswapV 
2Pair.sol---- 


// SPDX-License-Identifier: UNLICENSED 


pragma solidity >=0.5.0; 


interface IUniswapV2Pair { 


event Approval( 


address indexed owner, 


address indexed spender, 


uint256 value 


); 


event Transfer(address indexed from, address indexed to, uint256 value); 


function name() external pure returns (string memory); 


function symbol() external pure returns (string memory); 


function decimals() external pure returns (uints8); 


function totalSupply() external view returns (uint256); 


function balanceOf(address owner) external view returns (uint256); 


function allowance( 


address owner, 


address spender 


) external view returns (uint256); 


function approve(address spender, uint256 value) external returns (bool); 


function transfer(address to, uint256 value) external returns (bool); 


function transferFrom( 
address from, 
address to, 
uint256 value 


) external returns (bool); 


function DOMAIN _SEPARATOR() external view returns (bytes32); 


function PERMIT_TYPEHASH() external pure returns (bytes32); 


function nonces(address owner) external view returns (uint256); 


function permit( 
address owner, 
address spender, 
uint256 value, 
uint256 deadline, 
uint8 v, 


bytes32 r, 


bytes32 s 


) external; 


event Mint(address indexed sender, uint256 amountO, uint256 amount1); 

event Burn( 
address indexed sender, 
uint256 amounto, 
uint256 amount, 
address indexed to 

); 

event Swap( 
address indexed sender, 
uint256 amountOlIn, 
uint256 amount1In, 
uint256 amountOOut, 
uint256 amount1Out, 
address indexed to 

); 


event Sync(uint112 reserveO, uint112 reservel); 


function MINIMUM_LIQUIDITY() external pure returns (uint256); 


function factory() external view returns (address); 


function token0() external view returns (address); 


function token1() external view returns (address); 


function getReserves() 
external 
view 


returns (uint112 reserveO, uint112 reservel, uint32 blockTimestampLast); 


function priceOCumulativeLast() external view returns (uint256); 


function pricelCumulativeLast() external view returns (uint256); 


function kLast() external view returns (uint256); 


function mint(address to) external returns (uint256 liquidity); 


function burn( 
address to 


) external returns (uint256 amountO, uint256 amount1); 


function swap( 
uint256 amountOOut, 
uint256 amount1Out, 
address to, 
bytes calldata data 


) external; 


function skim(address to) external; 


function sync() external; 


function initialize(address, address) external; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\Swapper\interfaces/IUniswapV 
2Router02.sol---- 
// SPDX-License-Identifier: GPL-3.0 


pragma solidity >=0.6.2; 


interface I[UniswapV2RouterO1 { 


function factory() external pure returns (address); 


function WETH() external pure returns (address); 


function addLiquidity( 
address tokenA, 
address tokenB, 
uint256 amountADesired, 
uint256 amountBDesired, 
uint256 amountAMin, 
uint256 amountBMin, 
address to, 
uint256 deadline 


) external returns (uint256 amountA, uint256 amountB, uint256 liquidity); 


function addLiquidityETH( 
address token, 
uint256 amountTokenDesired, 
uint256 amountTokenMin, 


uint256 amountETHMin, 


address to, 


uint256 deadline 


external 
payable 


returns (uint256 amountToken, uint256 amountETH, uint256 liquidity); 


function removeLiquidity( 

address tokenA, 
address tokenB, 
uint256 liquidity, 
uint256 amountAMin, 
uint256 amountBMin, 
address to, 

uint256 deadline 


) external returns (uint256 amountA, uint256 amountB); 


function removeLiquidityETH( 
address token, 
uint256 liquidity, 
uint256 amountTokenMin, 
uint256 amountETHMin, 
address to, 
uint256 deadline 


) external returns (uint256 amountToken, uint256 amountETH); 


function removeLiquidityWithPermit( 
address tokenA, 
address tokenB, 
uint256 liquidity, 
uint256 amountAMin, 
uint256 amountBMin, 
address to, 
uint256 deadline, 
bool approveMax, 
uint8 v, 
bytes32 r, 
bytes32 s 


) external returns (uint256 amountA, uint256 amountB); 


function removeLiquidityETHWithPermit( 
address token, 
uint256 liquidity, 
uint256 amountTokenMin, 
uint256 amountETHMin, 
address to, 
uint256 deadline, 
bool approveMax, 
uint8 v, 
bytes32 r, 
bytes32 s 


) external returns (uint256 amountToken, uint256 amountETH); 


function swapExactTokensForTokens( 
uint256 amountin, 
uint256 amountOutMin, 
address[] calldata path, 
address to, 
uint256 deadline 


) external returns (uint256[] memory amounts); 


function swapTokensForExactTokens( 
uint256 amountOut, 
uint256 amountinMax, 
address[] calldata path, 
address to, 
uint256 deadline 


) external returns (uint256[] memory amounts); 


function swapExactETHForTokens( 
uint256 amountOutMin, 
address[] calldata path, 
address to, 
uint256 deadline 


) external payable returns (uint256[] memory amounts); 


function swapTokensForExactETH( 


uint256 amountOut, 


uint256 amountinMax, 
address[] calldata path, 
address to, 

uint256 deadline 


) external returns (uint256[] memory amounts); 


function swapExactTokensForETH( 
uint256 amountin, 
uint256 amountOutMin, 
address[] calldata path, 
address to, 
uint256 deadline 


) external returns (uint256[] memory amounts); 


function swapETHForExactTokens( 
uint256 amountOut, 
address[] calldata path, 
address to, 
uint256 deadline 


) external payable returns (uint256[] memory amounts); 


function quote( 
uint256 amountA, 
uint256 reserveA, 
uint256 reserveB 


) external pure returns (uint256 amountB); 


function getAmountOut( 
uint256 amountin, 
uint256 reserveln, 
uint256 reserveOut 


) external pure returns (uint256 amountOut); 


function getAmountin( 
uint256 amountOut, 
uint256 reserveln, 
uint256 reserveOut 


) external pure returns (uint256 amountin); 


function getAmountsOut( 
uint256 amountin, 
address[] calldata path 


) external view returns (uint256[] memory amounts); 


function getAmountsIn( 
uint256 amountOut, 
address[] calldata path 


) external view returns (uint256[] memory amounts); 


interface IUniswapV2Router02 is |IUniswapV2Router01 { 


function removeLiquidityETHSupportingFeeOnTransferTokens( 


address token, 

uint256 liquidity, 

uint256 amountTokenMin, 
uint256 amountETHMin, 
address to, 

uint256 deadline 


) external returns (uint256 amountETH); 


function removeLiquidityETHWithPermitSupportingFeeOnTransferTokens( 
address token, 
uint256 liquidity, 
uint256 amountTokenMin, 
uint256 amountETHMin, 
address to, 
uint256 deadline, 
bool approveMax, 
uint8 v, 
bytes32 r, 
bytes32 s 


) external returns (uint256 amountETH); 


function swapExactTokensForTokensSupportingFeeOnTransferTokens( 
uint256 amountin, 
uint256 amountOutMin, 
address[] calldata path, 


address to, 


uint256 deadline 


) external; 


function swapExactETHForTokensSupportingFeeOntTransferTokens( 
uint256 amountOutMin, 
address[] calldata path, 
address to, 
uint256 deadline 


) external payable; 


function swapExactTokensForETHSupportingFeeOntTransferTokens( 
uint256 amountin, 
uint256 amountOutMin, 
address[] calldata path, 
address to, 
uint256 deadline 


) external; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\Swapper\libraries/FullMath.sol- 
// SPDX-License-Identifier: MIT 


pragma solidity *0.8.18; 


/// @title Contains 512-bit math functions 
/// @notice Facilitates multiplication and division that can have overflow of an intermediate 
value without any loss of precision 
/// @dev Handles "phantom overflow" i.e., allows multiplication and division where an 
intermediate value overflows 256 bits 
library FullMath { 
/// @notice Calculates floor(aA—bA-denominator) with full precision. Throws if result 
overflows a uint256 or denominator == 
/// @param a The multiplicand 
/// @param b The multiplier 
[I| @param denominator The divisor 
/// @return result The 256-bit result 
/// @dev Credit to Remco Bloemen under MIT license https://xn--2-umb.com/21/muldiv 
function mulDiv( 
uint256 a, 
uint256 b, 
uint256 denominator 
) internal pure returns (uint256 result) { 
//512-bit multiply [prod1 prod0] = a * b 
// Compute the product mod 2**256 and mod 2**256 - 1 


// then use the Chinese Remainder Theorem to reconstruct 


// the 512 bit result. The result is stored in two 256 
// variables such that product = prod1 * 2**256 + prodO 
uint256 prodO; // Least significant 256 bits of the product 
uint256 prod1; // Most significant 256 bits of the product 
assembly { 

let mm := mulmod(a, b, not(0)) 

prodO := mul(a, b) 


prod1 := sub(sub(mm, prodO), It(mm, prodO)) 


// Handle non-overflow cases, 256 by 256 division 
if (orod1 == 0) { 
require(denominator > 0); 
assembly { 
result := div(prod0O, denominator) 
} 


return result; 


// Make sure the result is less than 2**256. 
// Also prevents denominator == 


require(denominator > prod1); 


MAMA 
// 512 by 256 division. 


IMMA 


// Make division exact by subtracting the remainder from [prod1 prod0] 
// Compute remainder using mulmod 
uint256 remainder; 
assembly { 
remainder := mulmod(a, b, denominator) 
} 
// Subtract 256 bit number from 512 bit number 
assembly { 
prodl := sub(prod1, gt(remainder, prodO)) 


prodO := sub(prod0O, remainder) 


// Factor powers of two out of denominator 

// Compute largest power of two divisor of denominator. 
// Always >= 1. 

uint256 twos = denominator & (~denominator + 1); 

// Divide denominator by power of two 

assembly { 


denominator := div(denominator, twos) 


// Divide [prod1 prodO] by the factors of two 
assembly { 


prodO := div(prodO, twos) 


// Shift in bits from prod1 into prodO. For this we need 
// to flip “twos” such that it is 2**256 / twos. 
// \f twos is zero, then it becomes one 
assembly { 
twos := add(div(sub(0, twos), twos), 1) 
} 


prodo |= prod1 * twos; 


// Invert denominator mod 2**256 

// Now that denominator is an odd number, it has an inverse 

// modulo 2**256 such that denominator * inv = 1 mod 2**256. 
// Compute the inverse by starting with a seed that is correct 
// correct for four bits. That is, denominator * inv = 1 mod 2**4 
uint256 inv = (3 * denominator) ^ 2; 

// Now use Newton-Raphson iteration to improve the precision. 
// Thanks to Hensel's lifting lemma, this also works in modular 
// arithmetic, doubling the correct bits in each step. 

inv *= 2 - denominator * inv; // inverse mod 2**8 

inv *= 2 - denominator * inv; // inverse mod 2**16 

inv *= 2 - denominator * inv; // inverse mod 2**32 

inv *= 2 - denominator * inv; // inverse mod 2**64 

inv *= 2 - denominator * inv; // inverse mod 2**128 


inv *= 2 - denominator * inv; // inverse mod 2**256 


// Because the division is now exact we can divide by multiplying 


// with the modular inverse of denominator. This will give us the 


// correct result modulo 2**256. Since the precoditions guarantee 
// that the outcome is less than 2**256, this is the final result. 

// We don't need to compute the high bits of the result and prod1 
// is no longer required. 

result = prodO * inv; 


return result; 


/// @notice Calculates ceil(aA—bA-denominator) with full precision. Throws if result 
overflows a uint256 or denominator == 
/// @param a The multiplicand 
/// @param b The multiplier 
/// @param denominator The divisor 
/// @return result The 256-bit result 
function mulDivRoundingUp( 
uint256 a, 
uint256 b, 
uint256 denominator 
) internal pure returns (uint256 result) { 
result = mulDiv(a, b, denominator); 
if (mulmod(a, b, denominator) > 0) { 
require(result < type(uint256).max); 


result++; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\Swapper\libraries/OracleLibrar 
y.sol---- 
// SPDX-License-Identifier: GPL-2.0-or-later 


pragma solidity ^0.8.18; 


import "./FullMath.sol"; 
import "./TickMath.sol"; 


import "@uniswap/v3-core/contracts/interfaces/IUniswapV3Pool.sol"; 


/// @title Oracle library 
/// @notice Provides functions to integrate with V3 pool oracle 
library OracleLibrary { 
/// @notice Calculates time-weighted means of tick and liquidity for a given Uniswap V3 
pool 
/// @param pool Address of the pool that we want to observe 
[I| @param secondsAgo Number of seconds in the past from which to calculate the 
time-weighted means 
/// @return arithmeticMeanTick The arithmetic mean tick from (block.timestamp - 
secondsAgo) to block.timestamp 
/// @return harmonicMeanLiquidity The harmonic mean liquidity from (block.timestamp - 
secondsAgo) to block.timestamp 
function consult( 
address pool, 


uint32 secondsAgo 


internal 


view 


returns (int24 arithmeticMeanTick, uintl28 harmonicMeanLiquidity) 


require(secondsAgo != 0, "BP"); 


uint32[] memory secondsAgos = new uint32[](2); 
secondsAgos[0] = secondsAgo; 


secondsAgos[1] = 0; 


int56[] memory tickCumulatives, 
uint160[] memory secondsPerLiquidityCumulativex128s 


) = IUniswapV3Pool(pool).observe(secondsAgos); 


int56 tickCumulativesDelta = tickCumulatives[1] - tickCumulatives[0]; 
uint160 secondsPerLiquidityCumulativesDelta = secondsPerLiquidityCumulativex128s[ 
1 


] - secondsPerLiquidityCumulativeX128s[0]; 


arithmeticMeanTick = int24(tickCumulativesDelta / int32(secondsAgo)); 
// Always round to negative infinity 
if ( 

tickCumulativesDelta < 0 && 

(tickCumulativesDelta % int32(secondsAgo) != 0) 


) arithmeticMeanTick--; 


// We are multiplying here instead of shifting to ensure that harmonicMeanLiquidity 
doesn't overflow uint128 
uintl192 secondsAgoX160 = uintl192(secondsAgo) * type(uint160).max; 
harmonicMeanLiquidity = uint128( 
secondsAgoxX160 / 


(uint192(secondsPerLiquidityCumulativesDelta) << 32) 


/// @notice Given a tick and a token amount, calculates the amount of token received in 
exchange 
/// @param tick Tick value used to calculate the quote 
/// @param baseAmount Amount of token to be converted 
/// @param baseToken Address of an ERC20 token contract used as the baseAmount 
denomination 
/// @param quoteToken Address of an ERC20 token contract used as the quoteAmount 
denomination 
/// @return quoteAmount Amount of quoteToken received for baseAmount of baseToken 
function getQuoteAtTick( 
int24 tick, 
uint128 baseAmount, 
address baseToken, 
address quoteToken 
) internal pure returns (uint256 quoteAmount) { 


uintl60 sqrtRatiox96 = TickMath.getSqrtRatioAtTick(tick); 


// Calculate quoteAmount with better precision if it doesn't overflow when multiplied by 
itself 
if (sqrtRatiox96 <= type(uint128).max) { 
uint256 ratioX192 = uint256(sqrtRatioX96) * sqrtRatiox96; 
quoteAmount = baseToken < quoteToken 
? FullMath.mulDiv(ratiox192, baseAmount, 1 << 192) 
: FullMath.mulDiv(1l << 192, baseAmount, ratiox192); 
} else { 
uint256 ratiox128 = FullMath.mulDiv( 
sqrtRatiox96, 
sqrtRatiox96, 
1 << 64 
); 
quoteAmount = baseToken < quoteToken 
? FullMath.mulDiv(ratiox128, baseAmount, 1 << 128) 


: FullMath.mulDiv(1l << 128, baseAmount, ratiox128); 


/// @notice Given a pool, it returns the number of seconds ago of the oldest stored 
observation 
/// @param pool Address of Uniswap V3 pool that we want to observe 
/// @return secondsAgo The number of seconds ago of the oldest observation stored for 
the pool 
function getOldestObservationSecondsAgo( 


address pool 


) internal view returns (uint32 secondsAgo) { 


( 


LA 


uint16 observationindex, 


uintl6 observationCardinality, 


) = IUniswapV3Pool(pool).slot0(); 


require(observationCardinality > 0, "NI"); 


(uint32 observationTimestamp, , , bool initialized) = IUniswapV3Pool( 
pool 


).observations((observationIndex + 1) % observationCardinality); 
// The next index might not be initialized if the cardinality is in the process of increasing 
// In this case the oldest observation is always in index 0 


if (linitialized) { 


(observationTimestamp, , , ) = [UniswapV3Pool(pool).observations(0); 


secondsAgo = uint32(block.timestamp) - observationTimestamp; 


/// @notice Given a pool, it returns the tick value as of the start of the current block 


/// @param pool Address of Uniswap V3 pool 
/// @return The tick that the pool was in at the start of the current block 
function getBlockStartingTickAndLiquidity( 
address pool 
) internal view returns (int24, uint128) { 


( 


int24 tick, 
uint16 observationiIndex, 


uintl6 observationCardinality, 


) = IUniswapV3Pool(pool).slot0(); 


// 2 observations are needed to reliably calculate the block starting tick 


require(observationCardinality > 1, "NEO"); 


// \f the latest observation occurred in the past, then no tick-changing trades have 
happened in this block 
// therefore the tick in `slot0` is the same as at the beginning of the current block. 
// We don't need to check if this observation is initialized - it is guaranteed to be. 
( 
uint32 observationTimestamp, 
int56 tickCumulative, 


uintl60 secondsPerLiquidityCumulativex128, 


) = IUniswapV3Pool(pool).observations(observation|Index); 
if (observationTimestamp != uint32(block.timestamp)) { 


return (tick, IUniswapV3Pool(pool).liquidity()); 


uint256 previndex = (uint256(observationIndex) + 
observationCardinality - 


1) % observationCardinality; 


uint32 prevObservationTimestamp, 

int56 prevTickCumulative, 

uint160 prevSecondsPerLiquidityCumulativex128, 
bool previnitialized 


) = IUniswapV3Pool(pool).observations(previndex); 


require(previnitialized, "ONI"); 


uint32 delta = observationTimestamp - prevObservationTimestamp; 
tick = int24((tickCumulative - prevTickCumulative) / int32(delta)); 
uint128 liquidity = uint128( 
(uint192(delta) * type(uint160).max) / 
(uint192( 
secondsPerLiquidityCumulativex128 - 
prevSecondsPerLiquidityCumulativex128 


) << 32) 


); 


return (tick, liquidity); 


/// @notice Information for calculating a weighted arithmetic mean tick 
struct WeightedTickData { 
int24 tick; 


uintl28 weight; 


/// @notice Given an array of ticks and weights, calculates the weighted arithmetic mean 
tick 
/// @param weightedTickData An array of ticks and weights 
/// @return weightedArithmeticMeanTick The weighted arithmetic mean tick 
/// @dev Each entry of “weightedTickData’ should represents ticks from pools with the 
same underlying pool tokens. If they do not, 
/// extreme care must be taken to ensure that ticks are comparable (including decimal 
differences). 
/// @dev Note that the weighted arithmetic mean tick corresponds to the weighted 
geometric mean price. 
function getWeightedArithmeticMeanTick( 
WeightedTickData[] memory weightedTickData 
) internal pure returns (int24 weightedArithmeticMeanTick) { 
// Accumulates the sum of products between each tick and its weight 


int256 numerator; 


// Accumulates the sum of the weights 


uint256 denominator; 


// Products fit in 152 bits, so it would take an array of length ~2**104 to overflow this 
logic 
for (uint256 i; i < weightedTickData.length; i++) { 
numerator += 
weightedTickData[i].tick * 
int256(uint256(weightedTickDatal[i].weight)); 


denominator += weightedTickData[i].weight; 


weightedArithmeticMeanTick = int24(numerator / int256(denominator)); 
// Always round to negative infinity 
if (numerator < 0 && (numerator % int256(denominator) != 0)) 


weightedArithmeticMeanTick--; 


/// @notice Returns the "synthetic" tick which represents the price of the first entry in 
`tokens` in terms of the last 
/// @dev Useful for calculating relative prices along routes. 
[I| @dev There must be one tick for each pairwise set of tokens. 
/// @param tokens The token contract addresses 
/// @param ticks The ticks, representing the price of each token pair in “tokens 
/// @return syntheticTick The synthetic tick, representing the relative price of the 


outermost tokens in ‘tokens’ 


function getChainedPrice( 
address[] memory tokens, 
int24[] memory ticks 
) internal pure returns (int256 syntheticTick) { 
require(tokens.length - 1 == ticks.length, "DL"); 
for (uint256 i = 1; i <= ticks.length; i++) { 
// check the tokens for address sort order, then accumulate the 
// ticks into the running synthetic tick, ensuring that intermediate tokens "cancel out" 
tokens[i - 1] < tokens[i] 
? syntheticTick += ticks[i - 1] 


: syntheticTick -= ticks[i - 1]; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\Swapper\libraries/SafeMath.sol 


// SPDX-License-Identifier: UNLICENSED 


pragma solidity >=0.6.6; 


Il a library for performing  overflow-safe math, courtesy of 


(https://github.com/dapphub/ds-math) 


library SafeMath { 
function add(uint256 x, uint256 y) internal pure returns (uint256 z) { 


require((z = x + y) >= x, "ds-math-add-overflow"); 


function sub(uint256 x, uint256 y) internal pure returns (uint256 z) { 


require((z = x - y) <= x, "ds-math-sub-underflow"); 


function mul(uint256 x, uint256 y) internal pure returns (uint256 z) { 


require(y == 0 || (z = x * y) / y == x, "ds-math-mul-overflow"); 


DappHub 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\Swapper\libraries/TickMath.sol- 
// SPDX-License-Identifier: GPL-2.0-or-later 


pragma solidity *0.8.18; 


/// @title Math library for computing sqrt prices from ticks and vice versa 
/// @notice Computes sqrt price for ticks of size 1.0001, i.e. sqrt(1.0001*tick) as fixed point 
Q64.96 numbers. Supports 
/// prices between 2**-128 and 2**128 
library TickMath { 

/// @dev The minimum tick that may be passed to #getSqrtRatioAtTick computed from 
log base 1.0001 of 2**-128 

int24 internal constant MIN_TICK = -887272; 

/// @dev The maximum tick that may be passed to #getSqrtRatioAtTick computed from 
log base 1.0001 of 2**128 


int24 internal constant MAX_TICK = -MIN_TICK; 


/// @dev The minimum value that can be returned from #getSqrtRatioAtTick. Equivalent 
to getSqrtRatioAtTick(MIN_TICK) 

uint160 internal constant MIN_SQRT_RATIO = 4295128739; 

/// @dev The maximum value that can be returned from #getSqrtRatioAtTick. Equivalent 
to getSqrtRatioAtTick(MAX_TICK) 

uint160 internal constant MAX_SQRT_RATIO = 


1461446703485210103287273052203988822378723970342; 


/// @notice Calculates sqrt(1.0001*tick) * 2*96 


/// @dev Throws if |tick| > max tick 
/// @param tick The input tick for the above formula 
/// @return sqrtPriceX96 A Fixed point Q64.96 number representing the sqrt of the ratio of 
the two assets (token1/token0O) 
/// at the given tick 
function getSqrtRatioAtTick( 
int24 tick 
) internal pure returns (uint160 sqrtPricex96) { 
uint256 absTick = tick < 0 
? uint256(-int256(tick)) 
: uint256(int256(tick)); 


require(absTick <= uint256(uint24(MAX_TICK)), "T"); 


uint256 ratio = absTick & 0x1 != 0 

? Oxfffcb933bd6fad37aa2d162d1a594001 

: 0x100000000000000000000000000000000; 
if (absTick & Ox2 != 0) 

ratio = (ratio * Oxfff97272373d413259a46990580e213a) >> 128; 
if (absTick & 0x4 != 0) 

ratio = (ratio * Oxfff2e50f5f656932ef12357cf3c7fdcc) >> 128; 
if (absTick & 0x8 != 0) 

ratio = (ratio * Oxffe5caca7e10e4e61c3624eaa0941cd0) >> 128; 
if (absTick & 0x10 != 0) 

ratio = (ratio * Oxffcb9843d60f6159c9db58835c926644) >> 128; 
if (absTick & 0x20 != 0) 


ratio = (ratio * Oxff973b41fa98c081472e6896dfb254c0) >> 128; 


if (absTick & 0x40 != 0) 

ratio = (ratio * Oxff2eal6466c96a3843ec78b326b52861) >> 128; 
if (absTick & 0x80 != 0) 

ratio = (ratio * Oxfe5dee046a99a2a811C461f1969c3053) >> 128; 
if (absTick & 0x100 != 0) 

ratio = (ratio * Oxfcbe86c7900a88aedcffc83b479aa3a4) >> 128; 
if (absTick & 0x200 != 0) 

ratio = (ratio * Oxf987a7253ac413176f2b074cf7815e54) >> 128; 
if (absTick & 0x400 != 0) 

ratio = (ratio * Oxf3392b0822b70005940c7a398e4b70Ff3) >> 128; 
if (absTick & 0x800 != 0) 

ratio = (ratio * 0xe7159475a2c29b7443b29c7fa6e889d9) >> 128; 
if (absTick & 0x1000 != 0) 

ratio = (ratio * Oxd097f3bdfd2022b8845ad8f792aa5825) >> 128; 
if (absTick & 0x2000 != 0) 

ratio = (ratio * Oxa9f746462d870fdf8a65dc1f90e061e5) >> 128; 
if (absTick & 0x4000 != 0) 

ratio = (ratio * 0Ox70d869a156d2alb890bb3df62baf32f7) >> 128; 
if (absTick & 0x8000 != 0) 

ratio = (ratio * 0x31be135f97d08fd981231505542fcfa6) >> 128; 
if (absTick & 0x10000 != 0) 

ratio = (ratio * 0x9aa508b5b7a84e1c677de54f3e99bc9) >> 128; 
if (absTick & 0x20000 != 0) 

ratio = (ratio * Ox5d6af8dedb81196699c329225ee604) >> 128; 
if (absTick & 0x40000 != 0) 


ratio = (ratio * 0x2216e584f5falea926041bedfe98) >> 128; 


if (absTick & 0x80000 != 0) 


ratio = (ratio * 0x48a170391f7dc42444e8fa2) >> 128; 


if (tick > 0) ratio = type(uint256).max / ratio; 


// this divides by 1<<32 rounding up to go from a Q128.128 to a Q128.96. 
// we then downcast because we know the result always fits within 160 bits due to our 
tick input constraint 
// we round up in the division so getTickAtSqrtRatio of the output price is always 
consistent 
sqrtPriceX96 = uint160( 


(ratio >> 32) + (ratio % (1 << 32) == 0? 0: 1) 


/// @notice Calculates the greatest tick value such that getRatioAtTick(tick) <= ratio 
/// @dev Throws in case sqrtPriceX96 < MIN SQRT RATIO, as MIN _SQRT RATIO is the 
lowest value getRatioAtTick may 

/// ever return. 
/// @param sqrtPriceX96 The sqrt ratio for which to compute the tick as a Q64.96 
/// @return tick The greatest tick for which the ratio is less than or equal to the input ratio 
function getTickAtSqrtRatio( 

uintl60 sqrtPricex96 
) internal pure returns (int24 tick) { 

// second inequality must be < because the price can never reach the price at the max 


tick 


require( 
sqrtPricex96 >= MIN SQRT_RATIO && sqrtPricex96 < MAX_SQRT_RATIO, 
npn 

); 


uint256 ratio = uint256(sqrtPriceX96) << 32; 


uint256 r = ratio; 


uint256 msb = 0; 


assembly { 
let f := shl(7, gt(r, OXFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF)) 
msb := or(msb, f) 
r:= shr(f, r) 
} 
assembly { 
let f := shl(6, gt(r, OXFFFFFFFFFFFFFFFF)) 
msb := or(msb, f) 
r:= shr(f, r) 
} 
assembly { 
let f := shl(5, gt(r, OXFFFFFFFF)) 
msb := or(msb, f) 
r:= shr(f, r) 
} 
assembly { 


let f := shl(4, gt(r, OXFFFF)) 


msb := or(msb, f) 
r:= shr(f, r) 

} 

assembly { 
let f := shl(3, gt(r, OxFF)) 
msb := or(msb, f) 
r:= shr(f, r) 

} 

assembly { 
let f := shl(2, gt(r, OxF)) 
msb := or(msb, f) 
r:= shr(f, r) 

} 

assembly { 
let f := shl(1, gt(r, 0x3)) 
msb := or(msb, f) 
r:=shr(f, r) 

} 

assembly { 
let f := gt(r, 0x1) 


msb := or(msb, f) 


if (msb >= 128) r = ratio >> (msb - 127); 


else r = ratio << (127 - msb); 


int256 log_2 = (int256(msb) - 128) << 64; 


assembly { 
r := shr(127, mul(r, r)) 
let f := shr(128, r) 
log 2 := or(log_2, shl(63, f)) 
r:= shr(f, r) 
} 
assembly { 
r := shr(127, mul(r, r)) 
let f := shr(128, r) 
log 2 := or(log_2, shl(62, f)) 
r:= shr(f, r) 
} 
assembly { 
r := shr(127, mul(r, r)) 
let f := shr(128, r) 
log 2 := or(log_2, shl(61, f)) 
r:= shr(f, r) 
} 
assembly { 
r := shr(127, mul(r, r)) 
let f := shr(128, r) 
log_2 := or(log_2, shl(60, f)) 


r:= shr(f, r) 


assembly { 
r := shr(127, mul(r, r)) 
let f := shr(128, r) 
log 2 := or(log_2, shl(59, f)) 
r:= shr(f, r) 
} 
assembly { 
r := shr(127, mul(r, r)) 
let f := shr(128, r) 
log 2 := or(log_2, shl(58, f)) 
r:= shr(f, r) 
I 
assembly { 
r := shr(127, mul(r, r)) 
let f := shr(128, r) 
log_2 := or(log_2, shl(57, f)) 
r:=shr(f, r) 
j; 
assembly { 
r := shr(127, mul(r, r)) 
let f := shr(128, r) 
log_2 := or(log_2, shl(56, f)) 
r := shr(f, r) 
} 
assembly { 


r:= shr(127, mul(r, r)) 


let f := shr(128, r) 
log 2 := or(log_ 2, shl(55, f)) 
r:= shr(f, r) 
} 
assembly { 
r := shr(127, mul(r, r)) 
let f := shr(128, r) 
log_2 := or(log_2, shl(54, f)) 
r := shr(f, r) 
} 
assembly { 
r := shr(127, mul(r, r)) 
let f := shr(128, r) 
log_2 := or(log_2, shl(53, f)) 
r := shr(f, r) 
} 
assembly { 
r := shr(127, mul(r, r)) 
let f := shr(128, r) 
log_2 := or(log_2, shl(52, f)) 
r := shr(f, r) 
} 
assembly { 
r := shr(127, mul(r, r)) 
let f := shr(128, r) 


log_2 := or(log_2, shl(51, f)) 


r:= shr(f, r) 

} 

assembly { 
r := shr(127, mul(r, r)) 
let f := shr(128, r) 


log_2 := or(log_2, shl(50, f)) 


int256 log_sqrt10001 = log 2 * 255738958999603826347141; // 128.128 number 


int24 tickLow = int24( 

(log_sqrt10001 - 3402992956809132418596140100660247210) >> 128 
); 
int24 tickHi = int24( 


(log_sqrt10001 + 291339464771989622907027621153398088495) >> 128 


tick = tickLow == tickHi 
? tickLow 
: getSqrtRatioAtTick(tickHi) <= sqrtPricexX96 
? tickHi 


: tickLow; 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\Swapper\libraries/UniswapV2Li 
brary.sol---- 


// SPDX-License-Identifier: GPL-3.0 


pragma solidity >=0.5.0; 


import "./SafeMath.sol"; 


import "../interfaces/IUniswapV2Pair.sol"; 


// solhint-disable max-line-length 


library UniswapV2Library { 


using SafeMath for uint256; 


// returns sorted token addresses, used to handle return values from pairs sorted in this 
order 
function sortTokens( 
address tokenA, 
address tokenB 
) internal pure returns (address tokenO, address tokenl1) { 
require(tokenA != tokenB, "UniswapV2Library: IDENTICAL_ADDRESSES"); 
(token0O, tokenl) = tokenA < tokenB 
? (tokenA, tokenB) 
: (tokenB, tokenA); 


require(tokenO != address(0), "UniswapV2Library: ZERO ADDRESS"); 


// calculates the CREATE2 address for a pair without making any external calls 
function pairFor( 
address factory, 
address tokenA, 
address tokenB, 
bytes32 pairCodeHash 
) internal pure returns (address pair) { 
(address tokenO, address token1) = sortTokens(tokenA, tokenB); 
pair = address( 
uint160( 
uint256( 
keccak256( 
abi.encodePacked( 
hex"ff", 
factory, 
keccak256(abi.encodePacked(token0O, token1)), 


pairCodeHash // init code hash 


// fetches and sorts the reserves for a pair 


function getReserves( 
address factory, 
address tokenA, 
address tokenB, 
bytes32 pairCodeHash 
) internal view returns (uint256 reserveA, uint256 reserveB) { 
(address tokenO, ) = sortTokens(tokenA, tokenB); 
(uint256 reserveO, uint256 reservel, ) = IUniswapV2Pair( 
pairFor(factory, tokenA, tokenB, pairCodeHash) 
).getReserves(); 
(reserveA, reserveB) = tokenA == tokenO 
? (reserveO, reservel) 


: (reservel, reserveO); 


// given some amount of an asset and pair reserves, returns an equivalent amount of the 
other asset 
function quote( 
uint256 amountA, 
uint256 reserveA, 
uint256 reserveB 
) internal pure returns (uint256 amountB) { 
require(amountA > 0, "UniswapV2Library: INSUFFICIENT AMOUNT"); 
require( 
reserveA > 0 && reserveB > 0, 


"UniswapV2Library: INSUFFICIENT LIQUIDITY" 


); 


amountB = amountA.mul(reserveB) / reserveA; 


// given an input amount of an asset and pair reserves, returns the maximum output 
amount of the other asset 
function getAmountOut( 
uint256 amountin, 
uint256 reserveln, 
uint256 reserveOut 
) internal pure returns (uint256 amountOut) { 
require(amountin > 0, "UniswapV2Library: INSUFFICIENT _INPUT_AMOUNT"); 
require( 
reserveln > 0 && reserveOut > 0, 
"UniswapV2Library: INSUFFICIENT LIQUIDITY" 
); 
uint256 amountinWithFee = amountin.mul(997); 
uint256 numerator = amountiInWithFee.mul(reserveOut); 
uint256 denominator = reserveln.mul(1000).add(amountInWithFee); 


amountOut = numerator / denominator; 


// given an output amount of an asset and pair reserves, returns a required input amount 
of the other asset 
function getAmountin( 


uint256 amountOut, 


uint256 reserveln, 
uint256 reserveOut 
) internal pure returns (uint256 amountin) { 
require(amountOut > 0, "UniswapV2Library: INSUFFICIENT OUTPUT _AMOUNT"); 
require( 
reserveln > 0 && reserveOut > 0, 
"UniswapV2Library: INSUFFICIENT LIQUIDITY" 
); 
uint256 numerator = reserveln.mul(amountOut).mul(1000); 
uint256 denominator = reserveOut.sub(amountOut).mul(997); 


amountin = (numerator / denominator).add(1); 


// performs chained getAmountOut calculations on any number of pairs 
function getAmountsOut( 
address factory, 
uint256 amountin, 
address[] memory path, 
bytes32 pairCodeHash 
) internal view returns (uint256[] memory amounts) { 
require(path.length >= 2, "UniswapV2Library: INVALID_PATH"); 
amounts = new uint256[](path.length); 
amounts[0] = amountlIn; 
for (uint256 i; i < path.length - 1; i++) { 
(uint256 reserveln, uint256 reserveOut) = getReserves( 


factory, 


path[i], 

path[i + 1], 

pairCodeHash 
); 


amounts[i + 1] = getAmountOut(amounts[i], reserveln, reserveOut); 


// performs chained getAmountin calculations on any number of pairs 
function getAmountsIn( 
address factory, 
uint256 amountOut, 
address[] memory path, 
bytes32 pairCodeHash 
) internal view returns (uint256[] memory amounts) { 
require(path.length >= 2, "UniswapV2Library: INVALID_PATH"); 
amounts = new uint256[](path.length); 
amounts[amounts.length - 1] = amountOut; 
for (uint256 i = path.length - 1; i > 0; i--) { 
(uint256 reserveln, uint256 reserveOut) = getReserves( 
factory, 
path[i - 1], 
path[i], 
pairCodeHash 
); 


amounts[i - 1] = getAmountIn(amounts[i], reserveln, reserveOut); 


----- E:/Train/makePDF/v1\tapioca-periph-audit-main\contracts\TapiocaDeployer/TapiocaDeplo 
yer.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity ^0.8.18; 


/// @notice Contract used to deploy other contracts 
IH @author 
https://github.com/OpenZeppelin/openzeppelin-contracts/blob/master/contracts/utils/Create 
2.sol 
/// @dev mainly used in the SDK to precomute the deployment address 
contract TapiocaDeployer { 

[** 

* @dev Deploys a contract using `CREATE2`. The address where the contract 

* will be deployed can be known in advance via {computeAddress}. 

* 

* The bytecode for a contract can be obtained from Solidity with 

* “type(contractName).creationCode . 


* 


* Requirements: 

* 

* - ‘bytecode’ must not be empty. 

* - ‘salt’ must have not been used for ‘bytecode’ already. 

* - the factory must have a balance of at least “amount”. 

* - if ‘amount is non-zero, ‘bytecode’ must have a `payable` constructor. 
*/ 


function deploy( 


uint256 amount, 
bytes32 salt, 
bytes memory bytecode, 
string memory contractName 
) external payable returns (address addr) { 
require( 
address(this).balance >= amount, 
"Create2: insufficient balance" 
); 
require( 
bytecode.length != 0, 
string.concat( 
"Create2: bytecode length is zero for contract ", 


contractName 


hi 
/// @solidity memory-safe-assembly 
assembly { 

addr := create2(amount, add(bytecode, 0x20), mload(bytecode), salt) 
} 
require( 

addr != address(0), 

string.concat( 

"Create2: Failed on deploy for contract ", 


contractName 


[** 
* @dev Returns the address where a contract will be stored if deployed via {deploy}. Any 
change in the 
* “bytecodeHash’ or `saltò will result in a new destination address. 
*/ 
function computeAddress( 
bytes32 salt, 
bytes32 bytecodeHash 
) external view returns (address) { 


return computeAddress(salt, bytecodeHash, address(this)); 


[** 
* @dev Returns the address where a contract will be stored if deployed via {deploy} 
from a contract located at 
* `deployer`. If `deployer is this contract's address, returns the same value as 
{computeAddress}. 
*/ 
function computeAddress( 
bytes32 salt, 
bytes32 bytecodeHash, 
address deployer 


) public pure returns (address addr) { 


/// @solidity memory-safe-assembly 
assembly { 


let ptr := mload(0x40) // Get free memory pointer 


/I | | ât“ ptr... ât“ ptr + OxOB (start)... ât“ ptr + 0x20 ... ât“ ptr + 0x40 
| 
I] [=== |-+=+===++==+==+ === === emmena- | 
//| bytecodeHash_ | CCCCCCCCCCCCC...CC | 
// | salt | BBBBBBBBBBBBB...BB | 
// | deployer | OOO000...OOOOAAAAAAAAAAAAAAAAAAA...AA 
| 
// | OXFF | FF | 
I]. |-==========--=- |-+=++==++==+==m === === =n mmmn ===- | 
// | memory | 


000000...00FFAAAAAAAAAAAAAAAAAAA...AABBBBBBBBBBBBB...BBCCCCCCCCCCCCC...CC | 
// |  keccak(start, 85) | 

at‘at‘at‘at‘at‘at‘at‘at‘at‘atat‘at‘at‘at‘atat‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘a 

Tatat‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at'at‘at‘at‘atat‘at‘at‘at‘at’ | 


mstore(add(ptr, 0x40), bytecodeHash) 
mstore(add(ptr, 0x20), salt) 
mstore(ptr, deployer) // Right-aligned with 12 preceding garbage bytes 
let start := add(ptr, OxOb) // The hashed data starts at the final garbage byte which 
we will set to Oxff 
mstore8(start, Oxff) 


addr := keccak256(start, 85) 


----- E:/Train/makePDF/v1\tapioca-sdk-main\sandbox\contracts/TapiocaDeployer.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity 0.8.18; 


// TODO - Write deployment bytecode instead of Solidity compilation output 


IH @author 
https://github.com/OpenZeppelin/openzeppelin-contracts/blob/master/contracts/utils/Create 
2.sol 
contract TapiocaDeployer { 

[** 

* @dev Deploys a contract using `CREATE2`. The address where the contract 

* will be deployed can be known in advance via {computeAddress}. 

* 

* The bytecode for a contract can be obtained from Solidity with 

* “type(contractName).creationCode . 


* 


* Requirements: 

* 

* - ‘bytecode’ must not be empty. 

* - ‘salt’ must have not been used for ‘bytecode’ already. 

* - the factory must have a balance of at least `amount`. 

* - if ‘amount is non-zero, ‘bytecode’ must have a `payable` constructor. 
*/ 

function deploy( 


uint256 amount, 


bytes32 salt, 
bytes memory bytecode 
) external payable returns (address addr) { 
require( 
address(this).balance >= amount, 
"Create2: insufficient balance" 
); 
require(bytecode.length != 0, "Create2: bytecode length is zero"); 
/// @solidity memory-safe-assembly 
assembly { 
addr := create2(amount, add(bytecode, 0x20), mload(bytecode), salt) 
} 


require(addr != address(0), "Create2: Failed on deploy"); 


[** 
* @dev Returns the address where a contract will be stored if deployed via {deploy}. Any 
change in the 
* “bytecodeHash’ or ‘salt’ will result in a new destination address. 
my. 
function computeAddress( 
bytes32 salt, 
bytes32 bytecodeHash 
) external view returns (address) { 


return computeAddress(salt, bytecodeHash, address(this)); 


[** 
* @dev Returns the address where a contract will be stored if deployed via {deploy} 
from a contract located at 
* `deployer`. If `deployer is this contract's address, returns the same value as 
{computeAddress}. 
gi 
function computeAddress( 
bytes32 salt, 
bytes32 bytecodeHash, 
address deployer 
) public pure returns (address addr) { 
/// @solidity memory-safe-assembly 
assembly { 


let ptr := mload(0x40) // Get free memory pointer 


/1 | | at“ ptr... ât“ ptr + OxOB (start)... at“ ptr + 0x20 ... at“ ptr + 0x40 
| 
i [minean amme mmeamini nanenane | 
//| bytecodeHash_ | CCCCCCCCCCCCC...CC | 
// | salt | BBBBBBBBBBBBB...BB | 
// | deployer | OOO000...OOOOAAAAAAAAAAAAAAAAAAA...AA 
| 
// | OXFF | FF | 
[f | amnencree [ae eae eterna | 


// | memory 


000000...00FFAAAAAAAAAAAAAAAAAAA...AABBBBBBBBBBBBB...BBCCCCCCCCCCCCC...CC | 
// |  keccak(start, 85) | 

at‘at‘at‘at‘atat‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘at‘a 

Tat‘at‘at‘at‘at‘at‘at‘at‘at‘atat‘at‘at‘at‘at‘at‘at‘at‘at‘atat‘at‘at‘at'at‘at‘at‘at‘at’ | 


mstore(add(ptr, 0x40), bytecodeHash) 
mstore(add(ptr, 0x20), salt) 
mstore(ptr, deployer) // Right-aligned with 12 preceding garbage bytes 
let start := add(ptr, OxOb) // The hashed data starts at the final garbage byte which 
we will set to Oxff 
mstore8(start, Oxff) 


addr := keccak256(start, 85) 


----- E:/Train/makePDF/v1\tapioca-sdk-main\sandbox\contracts/Vesting.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity 0.8.18; 


import "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol"; 
import "@openzeppelin/contracts/security/ReentrancyGuard.sol"; 


import "@boringcrypto/boring-solidity/contracts/BoringOwnable.sol"; 


contract Vesting is BoringOwnable, ReentrancyGuard { 


using SafeERC20 for IERC20; 


/// @notice the vested token 


IERC20 public token; 


/// @notice returns the start time for vesting 


uint256 public start; 


/// @notice returns the cliff period 


uint256 public cliff; 


/// @notice returns total vesting duration 


uint256 public duration; 


/// @notice returns total available tokens 


uint256 public seeded = 0; 


/// @notice user vesting data 
struct UserData { 
uint256 amount; 
uint256 claimed; 
uint256 latestClaimTimestamp; 
bool revoked; 


} 


mapping(address => UserData) public users; 


uint256 private _totalAmount; 


uint256 private _totalClaimed; 


// *** ERRORS ** // 

error NotStarted(); 

error NothingToClaim(); 
error Initialized(); 

error AddressNotValid(); 
error AmountNotValid(); 
error AlreadyRegistered(); 
error NoTokens(); 


error NotEnough(); 


error BalanceTooLow(); 


J1 °° EVENTS ** // 

/// @notice event emitted when a new user is registered 

event UserRegistered(address indexed user, uint256 amount); 
/// @notice event emitted when someone claims available tokens 


event Claimed(address indexed user, uint256 amount); 


/// @notice creates a new Vesting contract 

/// @param _cliff cliff period 

/// @param _duration vesting period 

constructor(uint256 cliff, uint256 duration, address owner) { 


require(_duration > 0, "Vesting: no vesting"); 


cliff = _ cliff; 
duration = _duration; 


owner = _owner, 


// *** VIEW FUNCTIONS *** // 


/// @notice returns total claimable 


function claimable() external view returns (uint256) { 


return vested(seeded) - _totalClaimed; 


/// @notice returns total claimable for user 
/// @param _user the user address 
function claimable(address _user) public view returns (uint256) { 


return vested(users[_user].amount) - users[_user].claimed; 


/// @notice returns total vested amount 
function vested() external view returns (uint256) { 


return _vested(seeded); 


/// @notice returns total vested amount for user 
/// @param _user the user address 
function vested(address _user) external view returns (uint256) { 


return vested(users[_user].amount); 


/// @notice returns total claimed 
function totalClaimed() external view returns (uint256) { 


return _totalClaimed; 


// *** PUBLIC FUNCTIONS *** // 

/// @notice claim available tokens 

/// @dev claim works for msg.sender 

function claim() external nonReentrant { 
if (start == 0 || seeded == 0) revert NotStarted(); 
uint256 claimable = claimable(msg.sender); 


if (_claimable == 0) revert NothingToClaim(); 


_totalClaimed += _claimable; 
users[msg.sender].claimed += _claimable; 


users[msg.sender].latestClaimTimestamp = block.timestamp; 


token.safeTransfer(msg.sender, _claimable); 


emit Claimed(msg.sender, _claimable); 


// ** OWNER FUNCTIONS *** // 

/// @notice adds a new user 

/// @dev should be called before init 

/// @param _user the user address 

/// @param _amount user weight 

function registerUser(address user, uint256 amount) external onlyOwner { 


if (start > 0) revert Initialized(); 


if (user == address(0)) revert AddressNotValid(); 
if (amount == 0) revert AmountNotValid(); 


if (users[_user].amount > 0) revert AlreadyRegistered(); 


UserData memory data; 
data.amount = _amount; 
data.claimed = 0; 

data.revoked = false; 
data.latestClaimTimestamp = 0; 


users[_user] = data; 


_totalAmount += _amount; 


emit UserRegistered(_user, amount); 


/// @notice inits the contract with total amount 

/// @dev sets the start time to block.timestamp 

/// @param _seededAmount total vested amount 

function init(IERC20 token, uint256 seededAmount) external onlyOwner { 
if (Start > 0) revert Initialized(); 
if ( seededAmount == 0) revert NoTokens(); 


if ( totalAmount > _seededAmount) revert NotEnough(); 


token = _token; 


uint256 availableToken = _token.balanceOf(address(this)); 


if (availableToken < seededAmount) revert BalanceTooLow(); 


seeded = seededAmount; 


start = block.timestamp; 


// *** PRIVATE FUNCTIONS *** // 
function vested(uint256 total) private view returns (uint256) { 
if (start == 0) return 0; 
uint256 total = total; 
if (block.timestamp < start + cliff) return 0; 
if (block.timestamp >= start + duration) return total; 


return (total * (block.timestamp - start)) / duration; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\sandbox\contracts\interfaces/lOracle.sol---- 
// SPDX-License-Identifier: MIT 


pragma solidity *0.8.0; 


interface lOracle { 
/// @notice Get the latest exchange rate. 
/// @param data Usually abi encoded, implementation specific data that contains 
information and arguments to & about the oracle. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return success if no valid (recent) rate is available, return false else true. 
/// @return rate The rate of the requested asset / pair / pool. 
function get( 
bytes calldata data 


) external returns (bool success, uint256 rate); 


/// @notice Check the last exchange rate without any state changes. 
/// @param data Usually abi encoded, implementation specific data that contains 
information and arguments to & about the oracle. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return success if no valid (recent) rate is available, return false else true. 
/// @return rate The rate of the requested asset / pair / pool. 


function peek( 


bytes calldata data 


) external view returns (bool success, uint256 rate); 


/// @notice Check the current spot exchange rate without any state changes. For oracles 
like TWAP this will be different from peek(). 
/// @param data Usually abi encoded, implementation specific data that contains 
information and arguments to & about the oracle. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return rate The rate of the requested asset / pair / pool. 


function peekSpot(bytes calldata data) external view returns (uint256 rate); 


/// @notice Returns a human readable (short) name about this oracle. 
/// @param data Usually abi encoded, implementation specific data that contains 
information and arguments to & about the oracle. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return (string) A human readable symbol name about this oracle. 


function symbol(bytes calldata data) external view returns (string memory); 


/// @notice Returns a human readable name about this oracle. 
/// @param data Usually abi encoded, implementation specific data that contains 
information and arguments to & about the oracle. 


/// For example: 


/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return (string) A human readable name about this oracle. 


function name(bytes calldata data) external view returns (string memory); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\sandbox\contracts\interfaces/lYieldBox.sol---- 
// SPDX-License-Identifier: MIT 


pragma solidity 0.8.18; 


/// @title TokenType 
/// @author BoringCrypto (@Boring_Crypto) 
/// @notice The YieldBox can hold different types of tokens: 
/// Native: These are ERC1155 tokens native to YieldBox. 
III Protocols using YieldBox should use these is possible when simple token creation is 
needed. 
/// ERC20: ERC20 tokens (including rebasing tokens) can be added to the YieldBox. 
/// ERC1155: ERC1155 tokens are also supported. 
III This can also be used to add YieldBox Native tokens to strategies since they are 
ERC1155 tokens. 
enum TokenType { 
Native, 
ERC20, 
ERC721, 
ERC1155, 


None 


interface lYieldBox { 


function wrappedNative() external view returns (address wrappedNative); 


function balanceOf( 


address to, 
uint256 assetid 


) external view returns (uint256 balance); 


function deposit( 
TokenType tokenType, 
address contractAddress, 
address strategy, 
uint256 tokenld, 
address from, 
address to, 
uint256 amount, 
uint256 share 


) external returns (uint256 amountOut, uint256 shareOut); 


function assets( 


uint256 assetid 


external 

view 

returns ( 
TokenType tokenType, 
address contractAddress, 
address strategy, 


uint256 tokenld 


function nativeTokens( 


uint256 assetid 


external 
view 


returns (string memory name, string memory symbol, uint8 decimals); 


function owner(uint256 assetid) external view returns (address owner); 


function totalSupply( 
uint256 assetld 


) external view returns (uint256 totalSupply); 


function depositAsset( 
uint256 assetld, 
address from, 
address to, 
uint256 amount, 
uint256 share 


) external returns (uint256 amountOut, uint256 shareOut); 


function withdraw( 
uint256 assetld, 
address from, 


address to, 


uint256 amount, 
uint256 share 


) external returns (uint256 amountOut, uint256 shareOut); 


function transfer( 
address from, 
address to, 
uint256 assetld, 
uint256 share 


) external; 


function batchTransfer( 
address from, 
address to, 
uint256[] calldata assetlids , 
uint256[] calldata shares _ 


) external; 


function transferMultiple( 
address from, 
address[] calldata tos, 
uint256 assetld, 
uint256[] calldata shares 


) external; 


function toShare( 


uint256 assetld, 
uint256 amount, 
bool roundUp 


) external view returns (uint256 share); 


function toAmount( 
uint256 assetld, 
uint256 share, 
bool roundUp 


) external view returns (uint256 amount); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\sandbox\contracts\options/oTAP.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity 0.8.18; 


import {BaseBoringBatchable} from 
"@boringcrypto/boring-solidity/contracts/BoringBatchable.sol"; 

import "@openzeppelin/contracts/token/ERC721/ERC721.sol"; 

import "@openzeppelin/contracts/token/ERC20/IERC20.sol"; 


import "tapioca-sdk/dist/contracts/util/ERC4494.sol"; 
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struct TapOption { 

uint128 expiry; // timestamp, as once one wise man said, the sun will go dark before this 
overflows 

uint128 discount; // discount in basis points 


uint256 tOLP; // tOLP token ID 


contract OTAP is ERC721, ERC721Permit, BaseBoringBatchable { 
uint256 public mintedOTAP; // total number of OTAP minted 
uint256 public mintedTAP; // total number of TAP minted 


address public broker; // address of the onlyBroker 


mapping(uint256 => TapOption) public options; // tokenld => Option 


mapping(uint256 => string) public tokenURIs; // tokenld => tokenURI 


constructor() ERC721("Option TAP", "oTAP") ERC721Permit("Option TAP") {} 


modifier onlyBroker() { 


require(msg.sender == broker, "OTAP: only onlyBroker"); 


// EVENTS 


event Mint(address indexed to, uint256 indexed tokenld, TapOption option); 


event Burn(address indexed from, uint256 indexed tokenld, TapOption option); 


function tokenURI( 
uint256 _tokenld 
) public view override returns (string memory) { 


return tokenURIs[_tokenld]; 


function isApprovedOrOwner( 
address spender, 
uint256 _tokenld 

) external view returns (bool) { 


return isApprovedOrOwner(_spender, tokenld); 


/// @notice Return the owner of the tokenld and the attributes of the option. 


function attributes( 
uint256 _tokenld 
) external view returns (address, TapOption memory) { 


return (ownerOf(_tokenld), options[_tokenld]); 


/// @notice Check if a token exists 
function exists(uint256 tokenld) external view returns (bool) { 


return _exists(_tokenld); 


function setTokenURI(uint256 _tokenld, string calldata tokenURI) external { 
require( 
_isApprovedOrOwner(msg.sender, tokenld), 
"OTAP: only approved or owner" 
); 


tokenURIs[_tokenld] = _tokenURI; 


/// @notice mints an OTAP 
/// @param _to address to mint to 


/// @param _expiry timestamp 


/// @param _discount TAP discount in basis points 
/// @param _tOLP tOLP token ID 
function mint( 
address to, 
uintl28 expiry, 
uint128 discount, 
uint256 tOLP 
) external onlyBroker returns (uint256 tokenld) { 
tokenld = ++mintedOTAP; 


_SafeMint(_to, tokenld); 


TapOption storage option = options[tokenld]; 
option.expiry = _expiry; 
option.discount = _discount; 


option.tOLP = tOLP; 


emit Mint(_to, tokenld, option); 


/// @notice burns an OTAP 
/// @param _tokenld tokenld to burn 
function burn(uint256 tokenld) external { 
require( 
_isApprovedOrOwner(msg.sender, tokenld), 


"OTAP: only approved or owner" 


_burn(_tokenld); 


emit Burn(msg.sender, tokenld, options[_tokenld]); 


/// @notice tOB claim 
function brokerClaim() external { 
require(broker == address(0), "OTAP: only once"); 


broker = msg.sender; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\sandbox\contracts\options/TapiocaOptionBroker.s 
ol---- 
// SPDX-License-lIdentifier: UNLICENSED 


pragma solidity 0.8.18; 


import "@boringcrypto/boring-solidity/contracts/BoringOwnable.sol"; 
import "@openzeppelin/contracts/token/ERC20/ERC20.sol"; 

import "@openzeppelin/contracts/security/Pausable.sol"; 

import "./TapiocaOptionLiquidityProvision.sol"; 

import "../interfaces/lOracle.sol"; 

import "../tokens/TapOFT.sol"; 

import "./twAML.sol"; 


import "./oTAP.sol"; 
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struct Participation { 
bool hasVotingPower; 
bool divergenceForce; // 0 negative, 1 positive 


uint256 averageMagnitude; 


struct TWAMLPool { 


uint256 totalParticipants; 


uint256 averageMagnitude; 
uint256 totalDeposited; 


uint256 cumulative; 


struct PaymentTokenOracle { 
lOracle oracle; 


bytes oracleData; 


contract TapiocaOptionBroker is Pausable, BoringOwnable, TWAML { 
TapiocaOptionLiquidityProvision public immutable tOLP; 
bytes public tapOracleData; 
TapOFT public immutable tapOFT; 
OTAP public immutable oTAP; 


lOracle public tapOracle; 


uint256 public lastEpochUpdate; // timestamp of the last epoch update 
uint256 public epochTAPValuation; // TAP price for the current epoch 


uint256 public epoch; // Represents the number of weeks since the start of the contract 


mapping(uint256 => Participation) public participants; // tOLPTokenID => Participation 


mapping(uint256 => mapping(uint256 => bool)) public oTAPCalls; // oTAPTokenID => 


epoch => hasExercised 


mapping(uint256 => mapping(uint256 => uint256)) public singularityGauges; // epoch 


=> sglAssetlId => availableTAP 


mapping(ERC20 => PaymentTokenOracle) public paymentTokens; // Token address => 
PaymentTokenOracle 


address public paymentTokenBeneficiary; // Where to collect the payment tokens 


mapping(uint256 => TWAMLPool) public twAML; // sglAssetid => twAMLPool 


uint256 constant MIN_WEIGHT_FACTOR = 10; // In BPS, 0.1% 
uint256 constant (MAX = 50 * 1e4; // 5% - 50% discount 
uint256 constant dMIN = 5 * 1e4; 


uint256 constant WEEK = 7 days; 


constructor( 
address _tOLP, 
address _oTAP, 
address _tapOFT, 
address paymentTokenBeneficiary, 
address owner 
){ 
paymentTokenBeneficiary = _paymentTokenBeneficiary; 
tOLP = TapiocaOptionLiquidityProvision(_tOLP); 
tapOFT = TapOFT(_tapOFT); 


oTAP = OTAP(_oTAP); 


owner = _owner, 


event Participate( 
uint256 indexed epoch, 
uint256 indexed sglAssetID, 
uint256 totalDeposited, 
LockPosition lock, 
uint256 discount 

); 

event AMLDivergence( 
uint256 indexed epoch, 
uint256 indexed cumulative, 
uint256 indexed averageMagnitude, 
uint256 totalParticipants 

); 

event ExerciseOption( 
uint256 indexed epoch, 
address indexed to, 
ERC20 indexed paymentToken, 
uint256 oTapTokenID, 


uint256 amount 


event NewEpoch( 
uint256 indexed epoch, 
uint256 extractedTAP, 
uint256 epochTAPValuation 

); 

event ExitPosition( 
uint256 indexed epoch, 
uint256 indexed tokenld, 
uint256 amount 

); 

event SetPaymentToken(ERC20 paymentToken, lOracle oracle, bytes oracleData); 


event SetTapOracle(lOracle oracle, bytes oracleData); 


/// @notice Returns the details of an OTC deal for a given oTAP token ID and a payment 
token. 

III The oracle uses the last peeked value, and not the latest one, so the payment 
amount may be different. 

/// @param _oTAPTokenID The oTAP token ID 

/// @param _paymentToken The payment token 

IIl @param _tapAmount The amount of TAP to be exchanged. If O it will use the full 

amount of TAP eligible for the deal 


/// @return eligibleTapAmount The amount of TAP eligible for the deal 


/// @return paymentTokenAmount The amount of payment tokens required for the deal 
function getOTCDealDetails( 

uint256 oTAPTokenlD, 

ERC20 paymentToken, 


uint256 tapAmount 


external 
view 


returns (uint256 eligibleTapAmount, uint256 paymentTokenAmount) 


// Load data 
(, TapOption memory oTAPPosition) = oTAP.attributes(_oTAPTokenID); 
(bool isPositionActive, LockPosition memory tOLPLockPosition) = tOLP 


.getLock(oTAPPosition.tOLP); 


uint256 cachedEpoch = epoch; 


PaymentTokenOracle memory paymentTokenOracle = paymentTokens[ 


_paymentToken 


// Check requirements 
require( 
paymentTokenOracle.oracle != lOracle(address(0)), 


"TapiocaOptionBroker: Payment token not supported" 


require( 
oTAPCalls[_oTAPTokenID][cachedEpoch] == false, 
"TapiocaOptionBroker: Already exercised" 

); 


require(isPositionActive, "TapiocaOptionBroker: Option expired"); 


// Get eligible OTC amount 

uint256 gaugeTotalForEpoch = singularityGauges[cachedEpoch][ 
tOLPLockPosition.sglAssetID 

J; 

eligibleTapAmount = muldiv( 
tOLPLockPosition.amount, 
gaugeTotalForEpoch, 


tOLP.getTotalPoolDeposited(tOLPLockPosition.sglAssetID) 


// Get TAP valuation 

uint256 otcAmountInUSD = ( 
_tapAmount == 0 ? eligibleTapAmount : tapAmount 

) * epochTAPValuation; // Divided by TAP decimals 

// Get payment token valuation 

(, uint256 paymentTokenValuation) = paymentTokenOracle.oracle.peek( 
paymentTokenOracle.oracleData 

); 

// Get payment token amount 


paymentTokenAmount = _getDiscountedPaymentAmount( 


otcAmountInUSD, 
paymentTokenValuation, 
oTAPPosition.discount, 


_paymentToken.decimals() 


/// @notice Participate in twAMI voting and mint an oTAP position 
/// @param _tOLPTokenlID The tokenld of the tOLP position 
function participate( 
uint256 tOLPTokenID 
) external returns (uint256 oTAPTokenlID) { 
// Compute option parameters 
(bool isPositionActive, LockPosition memory lock) = tOLP.getLock( 
_tOLPTokenID 
); 
require( 
isPositionActive, 


“TapiocaOptionBroker: Position is not active" 


TWAMLPool memory pool = twAML[lock.sglAssetID]; 


require( 
tOLP.isApprovedOrOwner(msg.sender, tOLPTokenID), 


"TapiocaOptionBroker: Not approved or owner" 


// Transfer tOLP position to this contract 


tOLP.transferFrom(msg.sender, address(this), tOLPTokenID); 


uint256 magnitude = computeMagnitude( 
uint256(lock.lockDuration), 
pool.cumulative 

); 

bool divergenceForce; 


uint256 target = computeTarget(dMIN, (MAX, magnitude, pool.cumulative); 


// Participate in twAMI voting 
bool hasVotingPower = lock.amount >= 
computeMinWeight(pool.totalDeposited, MIN_WEIGHT_FACTOR); 
if (nhasVotingPower) { 
pool.totalParticipants++; // Save participation 
pool.averageMagnitude = 
(pool.averageMagnitude + magnitude) / 


pool.totalParticipants; // compute new average magnitude 


// Compute and save new cumulative 


divergenceForce = lock.lockDuration > pool.cumulative; 
pool.cumulative = divergenceForce 
? pool.cumulative + pool.averageMagnitude 


: pool.cumulative - pool.averageMagnitude; 


// Save new weight 


pool.totalDeposited += lock.amount; 


twAML{[lock.sglAssetID] = pool; // Save twAML participation 
emit AMLDivergence( 
epoch, 
pool.cumulative, 
pool.averageMagnitude, 
pool.totalParticipants 
); // Register new voting power event 
} 
// Save twAML participation 
participants[_ tOLPTokenID] = Participation( 
hasVotingPower, 
divergenceForce, 


pool.averageMagnitude 


// Mint oTAP position 
oTAPTokenID = oTAP.mint( 


msg.sender, 


lock.lockTime + lock.lockDuration, 
uint128(target), 
_tOLPTokenID 
); 
emit Participate( 
epoch, 
lock.sglAssetID, 
pool.totalDeposited, 
lock, 


target 


/// @notice Exit a twAML participation and delete the voting power if existing 
/// @param _oTAPTokenlD The tokenld of the oTAP position 
function exitPosition(uint256 oTAPTokenID) external { 
require( 
oTAP.exists(_oTAPTokenID), 


"TapiocaOptionBroker: oTAP position does not exist" 


// Load data 
(, TapOption memory oTAPPosition) = oTAP.attributes(_oTAPTokenID); 


(, LockPosition memory lock) = tOLP.getLock(oTAPPosition.tOLP); 


require( 


oTAP.isApprovedOrOwner(msg.sender, oTAPTokenID), 
"TapiocaOptionBroker: Not approved or owner" 

); 

require( 
block.timestamp >= lock.lockTime + lock.lockDuration, 


"TapiocaOptionBroker: Lock not expired" 


Participation memory participation = participants[oTAPPosition.tOLP]; 


// Remove participation 
if (participation.hasVotingPower) { 


TWAMLPool memory pool = twAML[lock.sglAssetID]; 


pool.cumulative = participation.divergenceForce 
? pool.cumulative - participation.averageMagnitude 
: pool.cumulative + participation.averageMagnitude; 
pool.totalDeposited -= lock.amount; 


pool.totalParticipants--; 


twAML[lock.sglAssetID] = pool; // Save twAML exit 
emit AMLDivergence( 

epoch, 

pool.cumulative, 

pool.averageMagnitude, 


pool.totalParticipants 


); // Register new voting power event 


// Delete participation and burn oTAP position 
delete participants[oTAPPosition.tOLP]; 


oTAP.burn(_oTAPTokenID); 


// Transfer position back to user 


tOLP.transferFrom(address(this), msg.sender, oTAPPosition.tOLP); 


emit ExitPosition(epoch, oTAPPosition.tOLP, lock.amount); 


/// @notice Exercise an oTAP position 
/// @param _oTAPTokenlD tokenld of the oTAP position, position must be active 
/// @param _paymentToken Address of the payment token to use, must be whitelisted 
/// @param _tapAmount Amount of TAP to exercise. If 0, the full amount is exercised 
function exerciseOption( 

uint256 oTAPTokenlD, 

ERC20 paymentToken, 

uint256 tapAmount 
) external { 

// Load data 

(, TapOption memory oTAPPosition) = oTAP.attributes(_oTAPTokenID); 

(bool isPositionActive, LockPosition memory tOLPLockPosition) = tOLP 


.getLock(oTAPPosition.tOLP); 


uint256 cachedEpoch = epoch; 


PaymentTokenOracle memory paymentTokenOracle = paymentTokens[ 


_paymentToken 


// Check requirements 

require( 
paymentTokenOracle.oracle != |Oracle(address(0)), 
"TapiocaOptionBroker: Payment token not supported" 

); 

require( 
oTAP.isApprovedOrOwner(msg.sender, oTAPTokenID), 
"TapiocaOptionBroker: Not approved or owner" 

); 

require( 
oTAPCalls[_oTAPTokenID][cachedEpoch] == false, 
"TapiocaOptionBroker: Already exercised" 

); 


require(isPositionActive, "TapiocaOptionBroker: Option expired"); 


oTAPCalls[_oTAPTokenID][cachedEpoch] = true; // Save exercise call of the option for 


this epoch 


// Get eligible OTC amount 


uint256 gaugeTotalForEpoch = singularityGauges[cachedEpoch][ 


tOLPLockPosition.sglAssetID 
I; 
uint256 otcTapAmount = muldiv( 
tOLPLockPosition.amount, 
gaugeTotalForEpoch, 
tOLP.getTotalPoolDeposited(tOLPLockPosition.sglAssetID) 
); 
require( 
_tapAmount <= otcTapAmount, 
"TapiocaOptionBroker: Amount exceeds eligible TAP" 
); 


uint256 chosenAmount = _tapAmount == 0 ? otcTapAmount 


// Finalize the deal 

_processOTCDeal( 
_paymentToken, 
paymentTokenOracle, 
chosenAmount, 


oTAPPosition.discount 


emit ExerciseOption( 
cachedEpoch, 
msg.sender, 


_paymentToken, 


: tapAmount; 


_OTAPTokenlD, 


chosenAmount 


/// @notice Start a new epoch, extract TAP from the TapOFT contract, 
III emit it to the active singularities and get the price of TAP for the epoch. 
function newEpoch() external { 
require( 
block.timestamp >= lastEpochUpdate + WEEK, 
"TapiocaOptionBroker: too soon" 
); 
uint256[] memory singularities = tOLP.getSingularities(); 
require( 
singularities.length > 0, 


"TapiocaOptionBroker: No active singularities" 


// Update epoch info 
lastEpochUpdate = block.timestamp; 


epoch++; 


// Extract TAP 
uint256 epochTAP = tapOFT.emitForWeek(); 


_emitToGauges(epochTAP); 


// Get epoch TAP valuation 
(, epochTAPValuation) = tapOracle.get(tapOracleData); 


emit NewEpoch(epoch, epochTAP, epochTAPValuation); 


/// @notice Claim the Broker role of the oTAP contract 
function oTAPBrokerClaim() external { 


oTAP.brokerClaim(); 


/// @notice Set the TapOFT Oracle address and data 
/// @param _tapOracle The new TapOFT Oracle address 
/// @param _tapOracleData The new TapOFT Oracle data 
function setTapOracle( 

lOracle tapOracle, 

bytes calldata_tapOracleData 
) external onlyOwner { 

tapOracle = _tapOracle; 


tapOracleData = tapOracleData; 


emit SetTapOracle(_tapOracle, tapOracleData); 


/// @notice Activate or deactivate a payment token 
/// @dev set the oracle to address(0) to deactivate, expect the same decimal precision as 
TAP oracle 
function setPaymentToken( 
ERC20 paymentToken, 
lOracle _oracle, 
bytes calldata _oracleData 
) external onlyOwner { 
paymentTokens[_paymentToken].oracle = _oracle; 


paymentTokens[_paymentToken].oracleData = _oracleData; 


emit SetPaymentToken(_paymentToken, oracle, oracleData); 


/// @notice Set the payment token beneficiary 
/// @param _paymentTokenBeneficiary The new payment token beneficiary 
function setPaymentTokenBeneficiary( 
address paymentTokenBeneficiary 
) external onlyOwner { 


paymentTokenBeneficiary = _paymentTokenBeneficiary; 


/// @notice Collect the payment tokens from the OTC deals 
/// @param _paymentTokens The payment tokens to collect 


function collectPaymentTokens( 


address[] calldata__paymentTokens 
) external onlyOwner { 
require( 
paymentTokenBeneficiary != address(0), 
"TapiocaOptionBroker: Payment token beneficiary not set" 
); 


uint256 len = _paymentTokens.length; 


unchecked { 
for (uint256 i = 0; i < len; ++i) { 
ERC20 paymentToken = ERC20(_paymentTokens[i]); 
paymentToken.transfer( 
paymentTokenBeneficiary, 


paymentToken.balanceOf(address(this)) 


} 
} 
} 
|I ============ 
// INTERNAL 
|| ============ 


/// @notice Process the OTC deal, transfer the payment token to the broker and the TAP 


amount to the user 


/// @param _paymentToken The payment token 


/// @param _paymentTokenOracle The oracle of the payment token 
/// @param tapAmount The amount of TAP that the user has to receive 
[I| @param discount The discount that the user has to apply to the OTC deal 
function _processOTCDeal( 
ERC20 paymentToken, 
PaymentTokenOracle memory _paymentTokenOracle, 
uint256 tapAmount, 
uint256 discount 
) internal { 
// Get TAP valuation 


uint256 otcAmountInUSD = tapAmount * epochTAPValuation; 


// Get payment token valuation 
(, uint256 paymentTokenValuation) = _paymentTokenOracle.oracle.get( 


_paymentTokenOracle.oracleData 


// Calculate payment amount and initiate the transfers 

uint256 discountedPaymentAmount = _getDiscountedPaymentAmount( 
otcAmountiInUSD, 
paymentTokenValuation, 
discount, 


_paymentToken.decimals() 


_paymentToken.transferFrom( 


msg.sender, 

address(this), 

discountedPaymentAmount 
); 


tapOFT.extractTAP(msg.sender, tapAmount); 


/// @notice Computes the discounted payment amount for a given OTC amount in USD 
/// @param _otcAmountInUSD The OTC amount in USD, 8 decimals 
/// @param _paymentTokenValuation The payment token valuation in USD, 8 decimals 
/// @param _discount The discount in BPS 
/// @param _paymentTokenDecimals The payment token decimals 
/// @return paymentAmount The discounted payment amount 
function getDiscountedPaymentAmount( 

uint256 _otcAmountInUSD, 

uint256 paymentTokenValuation, 

uint256 discount, 

uint256 _paymentTokenDecimals 
) internal pure returns (uint256 paymentAmount) { 

// Calculate payment amount 

uint256 rawPaymentAmount = _otcAmountInUSD /_paymentTokenValuation; 

paymentAmount = 

rawPaymentAmount - 
muldiv(rawPaymentAmount, _discount, 1e6); // 1e4 is discount decimals, 100 is 
discount percentage 


paymentAmount = paymentAmount / (10 ** (18 -__paymentTokenDecimals)); 


/// @notice Emit TAP to the gauges equitably 
function emitToGauges(uint256 epochTAP) internal { 
SingularityPool[] memory sglPools = tOLP.getSingularityPools(); 


uint256 totalWeights = tOLP.totalSingularityPoolWeights(); 


uint256 len = sgIPools.length; 
unchecked { 
for (uint256 i = 0; i < len; ++i) { 
uint256 currentPoolWeight = sgIPools[i].poolWeight; 
uint256 quotaPerSingularity = muldiv( 
currentPoolWeight, 
_epochTAP, 
totalWeights 
); 
singularityGauges[epoch][ 
sgIPools[i].sglAssetID 


] = quotaPerSingularity; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\sandbox\contracts\options/TapiocaOptionLiquidity 
Provision.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity 0.8.18; 


import {BaseBoringBatchable} from 
"@boringcrypto/boring-solidity/contracts/BoringBatchable.sol"; 

import "@openzeppelin/contracts/token/ERC1155/IERC1155Receiver.sol"; 

import "@boringcrypto/boring-solidity/contracts/BoringOwnable.sol"; 

import "@openzeppelin/contracts/token/ERC1155/IERC1155.sol"; 

import "@openzeppelin/contracts/token/ERC721/ERC721.sol"; 

import "@openzeppelin/contracts/token/ERC20/IERC20.sol"; 

import "@openzeppelin/contracts/security/Pausable.sol"; 

import "tapioca-sdk/dist/contracts/util/ERC4494.sol"; 


import "../interfaces/lYieldBox.sol"; 
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struct LockPosition { 
uint128 sglAssetID; // Singularity market YieldBox asset ID 
uintl28 amount; // amount of tOLR tokens locked. 
uint128 lockTime; // time when the tokens were locked 


uint128 lockDuration; // duration of the lock 


struct SingularityPool { 
uint256 sglAssetID; // Singularity market YieldBox asset ID 
uint256 totalDeposited; // total amount of tOLR tokens deposited, used for pool share 
calculation 


uint256 poolWeight; // Pool weight to calculate emission 


contract TapiocaOptionLiquidityProvision is 
ERC721, 
ERC721Permit, 
BaseBoringBatchable, 
Pausable, 


BoringOwnable 


uint256 public tokenCounter; // Counter for token IDs 


mapping(uint256 => LockPosition) public lockPositions; // TokenID => LockPosition 


lYieldBox public immutable yieldBox; 


// Singularity market address => SingularityPool (YieldBox Asset ID is 0 if not active) 

mapping(IERC20 => SingularityPool) public activeSingularities; 

mapping(uint256 => IERC20) public sglAssetIDToAddress; // Singularity market YieldBox 
asset ID => Singularity market address 


uint256[] public singularities; // Array of active singularity asset IDs 


uint256 public totalSingularityPoolWeights; // Total weight of all active singularity pools 


constructor( 


address _yieldBox, 


address owner 


ERC721("TapiocaOptionLiquidityProvision", "tOLP") 


ERC721Permit("TapiocaOptionLiquidityProvision") 


yieldBox = lYieldBox(_yieldBox); 


owner = _owner, 


event Mint( 
address indexed to, 
uint128 indexed sglAssetID, 
LockPosition lockPosition 
); 
event Burn( 
address indexed to, 
uint128 indexed sglAssetID, 
LockPosition lockPosition 
); 
event UpdateTotalSingularityPoolWeights( 
uint256 totalSingularityPoolWeights 
); 
event SetSGLPoolWeight(address sgl, uint256 poolWeight); 
event RegisterSingularity(address sgl, uint256 assetID); 


event UnregisterSingularity(address sgl, uint256 assetID); 


// MODIFIERS 


modifier updateTotalSGLPoolWeights() { 


r 


totalSingularityPoolWeights = _computeSGLPoolWeights(); 


emit UpdateTotalSingularityPoolWeights(totalSingularityPoolWeights); 


/// @notice Returns the lock position of a given tOLP NFT and if it's active 
/// @param _tokenld tOLP NFT ID 
function getLock( 
uint256 _tokenld 
) external view returns (bool, LockPosition memory) { 


LockPosition memory lockPosition = lockPositions[_tokenld]; 


return (_isPositionActive(_tokenld), lockPosition); 


/// @notice Returns the active singularity YieldBox ID markets 


function getSingularities() external view returns (uint256[] memory) { 


return singularities; 


/// @notice Returns the active singularity pool data 
function getSingularityPools() 

external 

view 


returns (SingularityPool[] memory) 


uint256 len = singularities.length; 


SingularityPool[] memory pools = new SingularityPool[](len); 
unchecked { 
for (uint256 i = 0; i < len; ++i) { 
pools[i] = activeSingularities[ 


sglAssetIDToAddress[singularities[i]] 


} 


return pools; 


/// @notice Returns the total amount of locked tokens for a given singularity market 
function getTotalPoolDeposited( 
uint256 sglAssetld 
) external view returns (uint256) { 
return 
activeSingularities[sglAssetIDToAddress[_sglAssetld]] 


.totalDeposited; 


function isApprovedOrOwner( 
address spender, 
uint256 _tokenld 

) external view returns (bool) { 


return isApprovedOrOwner(_spender, tokenld); 


/// @notice Locks tOLR tokens for a given duration 
/// @param _from Address to transfer the SGL tokens from 
/// @param _to Address to mint the tOLP NFT to 
/// @param _singularity Singularity market address 
/// @param _lockDuration Duration of the lock 
/// @param _amount Amount of tOLR tokens to lock 
/// @return tokenld The ID of the minted NFT 
function lock( 

address from, 

address _ to, 

IERC20 _singularity, 

uint128 lockDuration, 


uintl28 amount 


) external returns (uint256 tokenld) { 
require(_lockDuration > 0, "tOLP: lock duration must be > 0"); 


require(_amount > 0, "tOLP: amount must be > 0"); 


uint256 sglAssetID = activeSingularities[_singularity].sglAssetID; 


require(sglAssetID > 0, "tOLP: singularity not active"); 


// Transfer the Singularity position to this contract 


uint256 sharesIn = yieldBox.toShare(sglAssetID, amount, false); 


yieldBox.transfer(_from, address(this), sglAssetID, sharesIn); 


activeSingularities[_singularity].totalDeposited += amount; 


// Mint the tOLP NFT position 
tokenld = ++tokenCounter; 


_SafeMint(_to, tokenld); 


// Create the lock position 

LockPosition storage lockPosition = lockPositions[tokenld]; 
lockPosition.lockTime = uintl28(block.timestamp); 
lockPosition.sglAssetID = uint128(sglAssetID); 
lockPosition.lockDuration = _lockDuration; 


lockPosition.amount = _amount; 


emit Mint(_to, uintl28(sglAssetID), lockPosition); 


/// @notice Unlocks tOLP tokens 
/// @param _tokenld ID of the position to unlock 
/// @param _singularity Singularity market address 
/// @param _to Address to send the tokens to 
function unlock( 

uint256 _tokenld, 

IERC20 _singularity, 

address to 
) external returns (uint256 sharesOut) { 


require(_exists(_tokenld), "tOLP: Expired position"); 


LockPosition memory lockPosition = lockPositions[_tokenld]; 
require( 
block.timestamp >= 
lockPosition.lockTime + lockPosition.lockDuration, 
"tOLP: Lock not expired" 
); 
require( 
activeSingularities[_singularity].sglAssetID == 
lockPosition.sglAssetID, 


"tOLP: Invalid singularity" 


require( 


_isApprovedOrOwner(msg.sender, tokenld), 


"tOLP: not owner nor approved" 


_burn(_tokenld); 


delete lockPositions[_tokenld]; 


// Transfer the tOLR tokens back to the owner 

sharesOut = yieldBox.toShare( 
lockPosition.sglAssetID, 
lockPosition.amount, 


false 


yieldBox.transfer( 
address(this), 
_to, 
lockPosition.sglAssetID, 
sharesOut 

); 


activeSingularities[_singularity].totalDeposited -= lockPosition.amount; 


emit Burn(_to, lockPosition.sglAssetID, lockPosition); 


// OWNER 


/// @notice Sets the pool weight of a given singularity market 
/// @param singularity Singularity market address 
/// @param weight Weight of the pool 
function setSGLPoolWEight( 
IERC20 singularity, 
uint256 weight 
) external onlyOwner updateTotalSGLPoolWeights { 
require( 
activeSingularities[singularity].sglAssetID > 0, 
"tOLP: not registered" 
); 


activeSingularities[singularity].poolWeight = weight; 


emit SetSGLPoolWeight(address(singularity), weight); 


/// @notice Registers a new singularity market 
/// @param singularity Singularity market address 
/// @param assetID YieldBox asset ID of the singularity market 
/// @param weight Weight of the pool 
function registerSingularity( 
IERC20 singularity, 
uint256 assetID, 


uint256 weight 


) external onlyOwner updateTotalSGLPoolWeights { 
require(assetID > 0, "tOLP: invalid asset ID"); 
require( 

activeSingularities[singularity].sglAssetID == 0, 


"tOLP: already registered" 


activeSingularities[singularity].sglAssetID = assetID; 
activeSingularities[singularity].poolWeight = weight > 0 ? weight : 1; 
sglAssetIDToAddress[assetID] = singularity; 


singularities.push(assetID); 


emit RegisterSingularity(address(singularity), assetID); 


/// @notice Un-registers a singularity market 
/// @param singularity Singularity market address 
function unregisterSingularity( 
IERC20 singularity 
) external onlyOwner updateTotalSGLPoolWeights { 
uint256 sglAssetID = activeSingularities[singularity].sglAssetID; 


require(sglAssetID > 0, "tOLP: not registered"); 


unchecked { 
uint256[] memory _singularities = singularities; 


uint256 sglLength = _singularities.length; 


uint256 sglLastindex = sglLength - 1; 


for (uint256 i = 0; i < sglLength; i++) { 
// \f in the middle, delete data and move last element to the deleted position, then 
pop 
if (_singularities[i] == sglAssetID && i < sglLastIndex) { 
delete activeSingularities[singularity]; 
delete sglAssetIDToAddress[sglAssetID]; 


delete singularities[i]; 


singularities[i] = _singularities[sglLastIndex]; 


singularities.pop(); 


break; 

} else { 
// \f last element, just pop 
delete activeSingularities[singularity]; 
delete sglAssetIDToAddress[sglAssetID]; 
delete singularities[sglLastIndex]; 


singularities.pop(); 


emit UnregisterSingularity(address(singularity), sglAssetID); 


/// @notice Compute the total pool weight of all active singularity markets 
function computeSGLPoolWeights() internal view returns (uint256) { 
uint256 total; 
uint256 len = singularities.length; 
for (uint256 i = 0; i < len; i++) { 
total += activeSingularities[sglAssetIDToAddress[singularities[i]]] 


.poolWeight; 


return total: 


/// @notice Checks if the lock position is still active 
function _isPositionActive(uint256 tokenld) internal view returns (bool) { 


LockPosition memory lockPosition = lockPositions[tokenld]; 


return 
(lockPosition.lockTime + lockPosition.lockDuration) >= 


block.timestamp; 


/// @notice ERC1155 compliance 
function onERC1155Received( 

address, 

address, 

uint256, 

uint256, 

bytes calldata 
) external pure returns (bytes4) { 

return 

bytes4( 
keccak256( 


"OnERC1155Received(address,address,uint256,uint256,bytes)" 


----- E:/Train/makePDF/v1\tapioca-sdk-main\sandbox\contracts\options/twAML.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity 0.8.18; 


abstract contract TWAML { 
/// @notice Compute the minimum weight to participate in the twAML voting mechanism 
/// @param _totalWeight The total weight of the twAML system 
/// @param _minWeightFactor The minimum weight factor in BPS 
function computeMinWeight( 
uint256 _totalWeight, 
uint256 _minWeightFactor 
) internal pure returns (uint256) { 
uint256 mul = (_totalWeight * _minWeightFactor); 


return mul >= 1e4 ? mul / 1e4 : _totalWeight; 


function computeMagnitude( 
uint256 _timeWeight, 
uint256 cumulative 
) internal pure returns (uint256) { 
return 
sqrt(_timeWeight * _timeWeight + cumulative * cumulative) - 


_cumulative; 


function computeTarget( 


uint256 _dMin, 
uint256 dMax, 
uint256 _magnitude, 
uint256 cumulative 
) internal pure returns (uint256) { 
if (cumulative == 0) { 
return _dMax; 
} 
uint256 target = (_magnitude *_dMax) / cumulative; 
target = target > _dMax ?_dMax: target <_dMin? dMin: target; 


return target; 


// babylonian 


method 


(https://en.wikipedia.org/wiki/Methods of computing square _roots#Babylonian_method) 


function sqrt(uint256 y) internal pure returns (uint256 z) { 
if (y > 3) { 
z= Yy; 
uint256x=y/2 +1; 
while (x < z) { 
z= X; 


x=(y/x+x)/2; 


} 
} else if (y != 0) { 
z=1; 


// https://xn--2-umb.com/21/muldiv/ 
function muldiv( 
uint256 a, 
uint256 b, 
uint256 denominator 
) internal pure returns (uint256 result) { 
// Handle division by zero 


require(denominator > 0); 


//512-bit multiply [prod1 prod0] =a*b 
// Compute the product mod 2**256 and mod 2**256 - 1 
// then use the Chinese Remainder Theorem to reconstruct 
// the 512 bit result. The result is stored in two 256 
// variables such that product = prod1 * 2**256 + prodO 
uint256 prodO; // Least significant 256 bits of the product 
uint256 prod1; // Most significant 256 bits of the product 
assembly { 

let mm := mulmod(a, b, not(0)) 


prodO := mul(a, b) 


prod1 := sub(sub(mm, prodO), It(mm, prodO)) 


// Short circuit 256 by 256 division 


// This saves gas when a * b is small, at the cost of making the 


// large case a bit more expensive. Depending on your use case you 
// may want to remove this short circuit and always go through the 
// 512 bit path. 
if (prod1l == 0) { 
assembly { 
result := div(prod0O, denominator) 
} 


return result; 


LMM 
// 512 by 256 division. 


MUTT 


// Handle overflow, the result must be < 2**256 


require(prod1l < denominator); 


// Make division exact by subtracting the remainder from [prod1 prod0] 
// Compute remainder using mulmod 
// Note mulmod(_,_, 0) == 0 
uint256 remainder; 
assembly { 
remainder := mulmod(a, b, denominator) 
} 
// Subtract 256 bit number from 512 bit number 


assembly { 


sub(prod1, gt(remainder, prodO)) 


O 
3 
O 
jor 
m 

II 


sub(prod0, remainder) 
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// Factor powers of two out of denominator 

// Compute largest power of two divisor of denominator. 

// Always >= 1 unless denominator is zero, then twos is zero. 
uint256 twos = denominator & (~denominator + 1); 

// Divide denominator by power of two 

assembly { 


denominator := div(denominator, twos) 


// Divide [prod1 prodO] by the factors of two 
assembly { 
prodO := div(prodO, twos) 
} 
// Shift in bits from prod1 into prodO. For this we need 
// to flip “twos” such that it is 2**256 / twos. 
// \f twos is zero, then it becomes one 
assembly { 
twos := add(div(sub(0, twos), twos), 1) 
} 


prodo |= prod1 * twos; 


// Invert denominator mod 2**256 


// Now that denominator is an odd number, it has an inverse 

// modulo 2**256 such that denominator * inv = 1 mod 2**256. 
// Compute the inverse by starting with a seed that is correct 
// correct for four bits. That is, denominator * inv = 1 mod 2**4 
// \f denominator is zero the inverse starts with 2 

uint256 inv = (3 * denominator) ^ 2; 

// Now use Newton-Raphson itteration to improve the precision. 
// Thanks to Hensel's lifting lemma, this also works in modular 
// arithmetic, doubling the correct bits in each step. 

inv *= 2 - denominator * inv; // inverse mod 2**8 

inv *= 2 - denominator * inv; // inverse mod 2**16 

inv *= 2 - denominator * inv; // inverse mod 2**32 

inv *= 2 - denominator * inv; // inverse mod 2**64 

inv *= 2 - denominator * inv; // inverse mod 2**128 

inv *= 2 - denominator * inv; // inverse mod 2**256 


// \f denominator is zero, inv is now 128 


// Because the division is now exact we can divide by multiplying 
// with the modular inverse of denominator. This will give us the 
// correct result modulo 2**256. Since the precoditions guarantee 
// that the outcome is less than 2**256, this is the final result. 

// We don't need to compute the high bits of the result and prod1 
// is no longer required. 

result = prodO * inv; 


return result; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\sandbox\contracts\options\mocks/ERC20WithoutS 
trategyMock.sol---- 
// SPDX-License-Identifier: MIT 


pragma solidity *0.8.0; 


import "tapioca-sdk/dist/contracts/YieldBox/contracts/strategies/ERC20WithoutStrategy.sol"; 


// solhint-disable const-name-snakecase 


// solhint-disable no-empty-blocks 


contract ERC20WithoutStrategyMock is ERC20WithoutStrategy { 


using BoringERC20 for IERC20; 


constructor( 
lYieldBox _yieldBox, 
IERC20 tokn 


) ERC20WithoutStrategy(_yieldBox, tokn) {} 


----- E:/Train/makePDF/v1\tapioca-sdk-main\sandbox\contracts\options\mocks/OracleMock.sol- 
// SPDX-License-ldentifier: UNLICENSED 


pragma solidity 0.8.18; 


import "../../interfaces/lOracle.sol"; 


contract OracleMock is |Oracle { 
uint256 public mockValue; 


string public name; 


constructor(string memory _ name) { 


_name = _ name; 


function setRate(uint256 rate) external { 


mockValue = _rate; 


/// @notice Get the latest exchange rate. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return success if no valid (recent) rate is available, return false else true. 
/// @return _rate The rate of the requested asset / pair / pool. 


function get( 


bytes calldata 
) external view returns (bool success, uint256_ rate) { 


return (true, mockValue); 


/// @notice Check the last exchange rate without any state changes. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return success if no valid (recent) rate is available, return false else true. 
/// @return rate The rate of the requested asset / pair / pool. 
function peek( 
bytes calldata 
) external view returns (bool success, uint256 rate) { 


return (true, mockValue); 


/// @notice Check the current spot exchange rate without any state changes. For oracles 
like TWAP this will be different from peek(). 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return rate The rate of the requested asset / pair / pool. 
function peekSpot(bytes calldata) external view returns (uint256 rate) { 


return mockValue; 


/// @notice Returns a human readable (short) name about this oracle. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return (string) A human readable symbol name about this oracle. 
function symbol(bytes calldata) external pure returns (string memory) { 


return "ORCM"; 


/// @notice Returns a human readable name about this oracle. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return (string) A human readable name about this oracle. 
function name(bytes calldata) external view returns (string memory) { 


return name; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\sandbox\contracts\options\mocks/TapiocaOptionB 
rokerMock.sol---- 
// SPDX-License-lIdentifier: UNLICENSED 


pragma solidity 0.8.18; 


import "@boringcrypto/boring-solidity/contracts/BoringOwnable.sol"; 


import "@openzeppelin/contracts/security/Pausable.sol"; 


import "../TapiocaOptionLiquidityProvision.sol"; 
import "../../interfaces/lOracle.sol"; 

import "../../tokens/TapOFT.sol"; 

import "../twAML.sol"; 


import "../oTAP.sol"; 
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struct Participation { 
bool hasVotingPower; 
uint256 averageMagnitude; 


bool divergenceForce; // 0 negative, 1 positive 


struct TWAMLPool { 


uint256 totalParticipants; 


uint256 averageMagnitude; 
uint256 totalDeposited; 


uint256 cumulative; 


struct PaymentTokenOracle { 
lOracle oracle; 


bytes oracleData; 


contract TapiocaOptionBrokerMock is Pausable, BoringOwnable, TWAML { 
TapiocaOptionLiquidityProvision public immutable tOLP; 
bytes public tapOracleData; 
TapOFT public immutable tapOFT; 
OTAP public immutable oTAP; 


lOracle public tapOracle; 


uint256 public lastEpochUpdate; // timestamp of the last epoch update 
uint256 public epochTAPValuation; // TAP price for the current epoch 


uint256 public epoch; // Represents the number of weeks since the start of the contract 


mapping(uint256 => Participation) public participants; // tOLPTokenID => Participation 


mapping(uint256 => mapping(uint256 => bool)) public oTAPCalls; // oTAPTokenID => 


epoch => hasExercised 


mapping(uint256 => mapping(uint256 => uint256)) public singularityGauges; // epoch 


=> sglAssetlId => availableTAP 


mapping(ERC20 => PaymentTokenOracle) public paymentTokens; // Token address => 
PaymentTokenOracle 


address public paymentTokenBeneficiary; // Where to collect the payment tokens 


mapping(uint256 => TWAMLPool) public twAML; // sglAssetid => twAMLPool 


uint256 constant MIN_WEIGHT_FACTOR = 10; // In BPS, 0.1% 
uint256 constant (MAX = 50 * 1e4; // 5% - 50% discount 
uint256 constant dMIN = 5 * 1e4; 


uint256 constant WEEK = 7 days; 


constructor( 
address _tOLP, 
address _oTAP, 
address _tapOFT, 
address paymentTokenBeneficiary, 
address owner 
){ 
paymentTokenBeneficiary = _paymentTokenBeneficiary; 
tOLP = TapiocaOptionLiquidityProvision(_tOLP); 
tapOFT = TapOFT(_tapOFT); 


oTAP = OTAP(_oTAP); 


owner = _owner, 


event Participate( 
uint256 indexed epoch, 
uint256 indexed sglAssetID, 
uint256 totalDeposited, 
LockPosition lock, 
uint256 discount 

); 

event AMLDivergence( 
uint256 indexed epoch, 
uint256 indexed cumulative, 
uint256 indexed averageMagnitude, 
uint256 totalParticipants 

); 

event ExerciseOption( 
uint256 indexed epoch, 
address indexed to, 
ERC20 indexed paymentToken, 
uint256 oTapTokenID, 


uint256 amount 


event NewEpoch( 
uint256 indexed epoch, 
uint256 extractedTAP, 
uint256 epochTAPValuation 

); 

event ExitPosition( 
uint256 indexed epoch, 
uint256 indexed tokenld, 
uint256 amount 

); 

event SetPaymentToken(ERC20 paymentToken, lOracle oracle, bytes oracleData); 


event SetTapOracle(lOracle oracle, bytes oracleData); 


/// @notice Returns the details of an OTC deal for a given oTAP token ID and a payment 
token. 

III The oracle uses the last peeked value, and not the latest one, so the payment 
amount may be different. 

/// @param _oTAPTokenID The oTAP token ID 

/// @param _paymentToken The payment token 

IIl @param _tapAmount The amount of TAP to be exchanged. If O it will use the full 

amount of TAP eligible for the deal 


/// @return eligibleTapAmount The amount of TAP eligible for the deal 


/// @return paymentTokenAmount The amount of payment tokens required for the deal 
function getOTCDealDetails( 

uint256 oTAPTokenlD, 

ERC20 paymentToken, 


uint256 tapAmount 


external 
view 


returns (uint256 eligibleTapAmount, uint256 paymentTokenAmount) 


// Load data 
(, TapOption memory oTAPPosition) = oTAP.attributes(_oTAPTokenID); 
(bool isPositionActive, LockPosition memory tOLPLockPosition) = tOLP 


.getLock(oTAPPosition.tOLP); 


uint256 cachedEpoch = epoch; 


PaymentTokenOracle memory paymentTokenOracle = paymentTokens[ 


_paymentToken 


// Check requirements 
require( 
paymentTokenOracle.oracle != lOracle(address(0)), 


"TapiocaOptionBroker: Payment token not supported" 


require( 
oTAPCalls[_oTAPTokenID][cachedEpoch] == false, 
"TapiocaOptionBroker: Already exercised" 

); 


require(isPositionActive, "TapiocaOptionBroker: Option expired"); 


// Get eligible OTC amount 

uint256 gaugeTotalForEpoch = singularityGauges[cachedEpoch][ 
tOLPLockPosition.sglAssetID 

J; 

eligibleTapAmount = muldiv( 
tOLPLockPosition.amount, 
gaugeTotalForEpoch, 


tOLP.getTotalPoolDeposited(tOLPLockPosition.sglAssetID) 


// Get TAP valuation 

uint256 otcAmountInUSD = ( 
_tapAmount == 0 ? eligibleTapAmount : tapAmount 

) * epochTAPValuation; // Divided by TAP decimals 

// Get payment token valuation 

(, uint256 paymentTokenValuation) = paymentTokenOracle.oracle.peek( 
paymentTokenOracle.oracleData 

); 

// Get payment token amount 


paymentTokenAmount = _getDiscountedPaymentAmount( 


otcAmountInUSD, 
paymentTokenValuation, 
oTAPPosition.discount, 


_paymentToken.decimals() 


/// @notice Participate in twAMI voting and mint an oTAP position 
/// @param _tOLPTokenlID The tokenld of the tOLP position 
function participate( 
uint256 tOLPTokenID 
) external returns (uint256 oTAPTokenlID) { 
// Compute option parameters 
(bool isPositionActive, LockPosition memory lock) = tOLP.getLock( 
_tOLPTokenID 
); 
require( 
isPositionActive, 


“TapiocaOptionBroker: Position is not active" 


TWAMLPool memory pool = twAML[lock.sglAssetID]; 


require( 
tOLP.isApprovedOrOwner(msg.sender, tOLPTokenID), 


"TapiocaOptionBroker: Not approved or owner" 


// Transfer tOLP position to this contract 


tOLP.transferFrom(msg.sender, address(this), tOLPTokenID); 


uint256 magnitude = computeMagnitude( 
uint256(lock.lockDuration), 
pool.cumulative 

); 

bool divergenceForce; 


uint256 target = computeTarget(dMIN, (MAX, magnitude, pool.cumulative); 


// Participate in twAMI voting 
bool hasVotingPower = lock.amount >= 
computeMinWeight(pool.totalDeposited, MIN_WEIGHT_FACTOR); 
if (nhasVotingPower) { 
pool.totalParticipants++; // Save participation 
pool.averageMagnitude = 
(pool.averageMagnitude + magnitude) / 


pool.totalParticipants; // compute new average magnitude 


// Compute and save new cumulative 


divergenceForce = lock.lockDuration > pool.cumulative; 
pool.cumulative = divergenceForce 
? pool.cumulative + pool.averageMagnitude 


: pool.cumulative - pool.averageMagnitude; 


// Save new weight 


pool.totalDeposited += lock.amount; 


twAML{[lock.sglAssetID] = pool; // Save twAML participation 
emit AMLDivergence( 
epoch, 
pool.cumulative, 
pool.averageMagnitude, 
pool.totalParticipants 
); // Register new voting power event 
} 
// Save twAML participation 
participants[_ tOLPTokenID] = Participation( 
hasVotingPower, 
pool.averageMagnitude, 


divergenceForce 


// Mint oTAP position 
oTAPTokenID = oTAP.mint( 


msg.sender, 


lock.lockTime + lock.lockDuration, 
uint128(target), 
_tOLPTokenID 
); 
emit Participate( 
epoch, 
lock.sglAssetID, 
pool.totalDeposited, 
lock, 


target 


/// @notice Exit a twAML participation and delete the voting power if existing 
/// @param _oTAPTokenlD The tokenld of the oTAP position 
function exitPosition(uint256 oTAPTokenID) external { 
require( 
oTAP.exists(_oTAPTokenID), 


"TapiocaOptionBroker: oTAP position does not exist" 


// Load data 
(, TapOption memory oTAPPosition) = oTAP.attributes(_oTAPTokenID); 


(, LockPosition memory lock) = tOLP.getLock(oTAPPosition.tOLP); 


require( 


oTAP.isApprovedOrOwner(msg.sender, oTAPTokenID), 
"TapiocaOptionBroker: Not approved or owner" 

); 

require( 
block.timestamp >= lock.lockTime + lock.lockDuration, 


"TapiocaOptionBroker: Lock not expired" 


Participation memory participation = participants[oTAPPosition.tOLP]; 


// Remove participation 
if (participation.hasVotingPower) { 


TWAMLPool memory pool = twAML[lock.sglAssetID]; 


pool.cumulative = participation.divergenceForce 
? pool.cumulative - participation.averageMagnitude 
: pool.cumulative + participation.averageMagnitude; 
pool.totalDeposited -= lock.amount; 


pool.totalParticipants--; 


twAML[lock.sglAssetID] = pool; // Save twAML exit 
emit AMLDivergence( 

epoch, 

pool.cumulative, 

pool.averageMagnitude, 


pool.totalParticipants 


); // Register new voting power event 


// Delete participation and burn oTAP position 
delete participants[oTAPPosition.tOLP]; 


oTAP.burn(_oTAPTokenID); 


// Transfer position back to user 


tOLP.transferFrom(address(this), msg.sender, oTAPPosition.tOLP); 


emit ExitPosition(epoch, oTAPPosition.tOLP, lock.amount); 


/// @notice Exercise an oTAP position 
/// @param _oTAPTokenlD tokenld of the oTAP position, position must be active 
/// @param _paymentToken Address of the payment token to use, must be whitelisted 
/// @param _tapAmount Amount of TAP to exercise. If 0, the full amount is exercised 
function exerciseOption( 

uint256 oTAPTokenlD, 

ERC20 paymentToken, 

uint256 tapAmount 
) external { 

// Load data 

(, TapOption memory oTAPPosition) = oTAP.attributes(_oTAPTokenID); 

(bool isPositionActive, LockPosition memory tOLPLockPosition) = tOLP 


.getLock(oTAPPosition.tOLP); 


uint256 cachedEpoch = epoch; 


PaymentTokenOracle memory paymentTokenOracle = paymentTokens[ 


_paymentToken 


// Check requirements 

require( 
paymentTokenOracle.oracle != |Oracle(address(0)), 
"TapiocaOptionBroker: Payment token not supported" 

); 

require( 
oTAP.isApprovedOrOwner(msg.sender, oTAPTokenID), 
"TapiocaOptionBroker: Not approved or owner" 

); 

require( 
oTAPCalls[_oTAPTokenID][cachedEpoch] == false, 
"TapiocaOptionBroker: Already exercised" 

); 


require(isPositionActive, "TapiocaOptionBroker: Option expired"); 


oTAPCalls[_oTAPTokenID][cachedEpoch] = true; // Save exercise call of the option for 


this epoch 


// Get eligible OTC amount 


uint256 gaugeTotalForEpoch = singularityGauges[cachedEpoch][ 


tOLPLockPosition.sglAssetID 
I; 
uint256 otcTapAmount = muldiv( 
tOLPLockPosition.amount, 
gaugeTotalForEpoch, 
tOLP.getTotalPoolDeposited(tOLPLockPosition.sglAssetID) 
); 
require( 
_tapAmount <= otcTapAmount, 
"TapiocaOptionBroker: Amount exceeds eligible TAP" 
); 


uint256 chosenAmount = _tapAmount == 0 ? otcTapAmount 


// Finalize the deal 

_processOTCDeal( 
_paymentToken, 
paymentTokenOracle, 
chosenAmount, 


oTAPPosition.discount 


emit ExerciseOption( 
cachedEpoch, 
msg.sender, 


_paymentToken, 


: tapAmount; 


_OTAPTokenlD, 


chosenAmount 


/// @notice Start a new epoch, extract TAP from the TapOFT contract, 
III emit it to the active singularities and get the price of TAP for the epoch. 
function newEpoch() external { 
require( 
block.timestamp >= lastEpochUpdate + WEEK, 
"TapiocaOptionBroker: too soon" 
); 
uint256[] memory singularities = tOLP.getSingularities(); 
require( 
singularities.length > 0, 


"TapiocaOptionBroker: No active singularities" 


// Update epoch info 
lastEpochUpdate = block.timestamp; 


epoch++; 


// Extract TAP 
tapOFT.emitForWeek(); 
uint256 epochTAP = tapOFT.balanceOf(address(tapOFT)); 


_emitToGauges(epochTAP); 


// Get epoch TAP valuation 
(, epochTAPValuation) = tapOracle.get(tapOracleData); 


emit NewEpoch(epoch, epochTAP, epochTAPValuation); 


/// @notice Claim the Broker role of the oTAP contract 
function oTAPBrokerClaim() external { 


oTAP.brokerClaim(); 


/// @notice Set the TapOFT Oracle address and data 
/// @param _tapOracle The new TapOFT Oracle address 
/// @param _tapOracleData The new TapOFT Oracle data 
function setTapOracle( 

lOracle tapOracle, 

bytes calldata_tapOracleData 
) external onlyOwner { 

tapOracle = _tapOracle; 


tapOracleData = tapOracleData; 


emit SetTapOracle(_tapOracle, tapOracleData); 


/// @notice Activate or deactivate a payment token 
/// @dev set the oracle to address(0) to deactivate, expect the same decimal precision as 
TAP oracle 
function setPaymentToken( 
ERC20 paymentToken, 
lOracle _oracle, 
bytes calldata _oracleData 
) external onlyOwner { 
paymentTokens[_paymentToken].oracle = _oracle; 


paymentTokens[_paymentToken].oracleData = _oracleData; 


emit SetPaymentToken(_paymentToken, oracle, oracleData); 


/// @notice Set the payment token beneficiary 
/// @param _paymentTokenBeneficiary The new payment token beneficiary 
function setPaymentTokenBeneficiary( 
address paymentTokenBeneficiary 
) external onlyOwner { 


paymentTokenBeneficiary = _paymentTokenBeneficiary; 


/// @notice Collect the payment tokens from the OTC deals 


/// @param _paymentTokens The payment tokens to collect 


function collectPaymentTokens( 
address[] calldata paymentTokens 
) external onlyOwner { 
require( 
paymentTokenBeneficiary != address(0), 
"TapiocaOptionBroker: Payment token beneficiary not set" 
); 


uint256 len = _paymentTokens.length; 


unchecked { 
for (uint256 i = 0; i < len; ++i) { 
ERC20 paymentToken = ERC20(_paymentTokens[i]); 
paymentToken.transfer( 
paymentTokenBeneficiary, 


paymentToken.balanceOf(address(this)) 


} 
} 
} 
|| ============ 
// INTERNAL 
|| ============ 


/// @notice Process the OTC deal, transfer the payment token to the broker and the TAP 


amount to the user 


/// @param _paymentToken The payment token 
/// @param _paymentTokenOracle The oracle of the payment token 
/// @param tapAmount The amount of TAP that the user has to receive 
/// @param discount The discount that the user has to apply to the OTC deal 
function _processOTCDeal( 

ERC20 paymentToken, 

PaymentTokenOracle memory _paymentTokenOracle, 

uint256 tapAmount, 

uint256 discount 
) internal { 

// Get TAP valuation 


uint256 otcAmountInUSD = tapAmount * epochTAPValuation; 


// Get payment token valuation 
(, uint256 paymentTokenValuation) = _paymentTokenOracle.oracle.get( 


_paymentTokenOracle.oracleData 


// Calculate payment amount and initiate the transfers 

uint256 discountedPaymentAmount = _getDiscountedPaymentAmount( 
otcAmountinUSD, 
paymentTokenValuation, 
discount, 


_paymentToken.decimals() 


_paymentToken.transferFrom( 
msg.sender, 
address(this), 
discountedPaymentAmount 
); 


tapOFT.extractTAP(msg.sender, tapAmount); 


/// @notice Computes the discounted payment amount for a given OTC amount in USD 
/// @param _otcAmountInUSD The OTC amount in USD, 8 decimals 
/// @param _paymentTokenValuation The payment token valuation in USD, 8 decimals 
/// @param _discount The discount in BPS 
/// @param _paymentTokenDecimals The payment token decimals 
/// @return paymentAmount The discounted payment amount 
function getDiscountedPaymentAmount( 

uint256 _otcAmountInUSD, 

uint256 paymentTokenValuation, 

uint256 discount, 

uint256 _paymentTokenDecimals 
) internal pure returns (uint256 paymentAmount) { 

// Calculate payment amount 

uint256 rawPaymentAmount = _otcAmountInUSD /_paymentTokenValuation; 

paymentAmount = 

rawPaymentAmount - 
muldiv(rawPaymentAmount, _discount, 1e6); // 1e4 is discount decimals, 100 is 


discount percentage 


paymentAmount = paymentAmount / (10 ** (18 - _paymentTokenDecimals)); 


/// @notice Emit TAP to the gauges equitably 
function emitToGauges(uint256 epochTAP) internal { 
SingularityPool[] memory sglPools = tOLP.getSingularityPools(); 


uint256 totalWeights = tOLP.totalSingularityPoolWeights(); 


uint256 len = sgIPools.length; 
unchecked { 
for (uint256 i = 0; i < len; ++i) { 
uint256 currentPoolWeight = sgIPools[i].poolWeight; 
uint256 quotaPerSingularity = muldiv( 
currentPoolWeight, 
_epochTAP, 
totalWeights 
); 
singularityGauges[epoch]|[ 
sgIPools[i].sglAssetID 


] = quotaPerSingularity; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\sandbox\contracts\options\mocks/YieldBoxMock.s 
ol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity 0.8.18; 


import "tapioca-sdk/dist/contracts/YieldBox/contracts/YieldBox.sol"; 
import "tapioca-sdk/dist/contracts/YieldBox/contracts/mocks/WETH9Mock.sol"; // To include 


it in compilation 


contract YieldBoxMock is YieldBox { 
constructor( 
IWrappedNative wrappedNative_, 
YieldBoxURIBuilder uriBuilder_ 


) YieldBox(wrappedNative_, uriBuilder_) {} 


----- E:/Train/makePDF/v1\tapioca-sdk-main\sandbox\contracts\tokens/TapOFT.sol---- 
// SPDX-License-Identifier: UNLICENSED 


pragma solidity 0.8.18; 


import "@openzeppelin/contracts/token/ERC20/extensions/draft-ERC20Permit.sol"; 

import "tapioca-sdk/dist/contracts/interfaces/ILayerZeroEndpoint.sol"; 

import {BaseBoringBatchable} from 
"@boringcrypto/boring-solidity/contracts/BoringBatchable.sol"; 

import "tapioca-sdk/dist/contracts/token/oft/v2/OFTV2.sol"; 


import "tapioca-sdk/dist/contracts/libraries/LZLib.sol"; 
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*/ 


/// @title Tapioca OFT token 
/// @notice OFT compatible TAP token 
/// @dev Latest size: 17.663 KiB 
/// @dev Emissions E(x)= E(x-1) - E(x-1) * D with E being total supply a x week, and D the 
initial decay rate 
contract TapOFT is OFTV2, ERC20Permit, BaseBoringBatchable { 
using ExcessivelySafeCall for address; 


using BytesLib for bytes; 


// *DATA* 


// * DSO: 56.5m 

//* DAO: 10m 

// * Contributors: 15m 

// * Investors: 11m 

//* LBP: 5m 

// * Airdrop: 2.5m 

// == 100M == 

uint256 public constant INITIAL_ SUPPLY = 43_500_000 * 1e18; // Everything minus DSO 


uint256 public dso supply = 56 500 000 * 1e18; 


/// @notice the a parameter used in the emission function; 
uint256 constant decay_rate = 8800000000000000; // 0.88% 


uint256 constant DECAY_RATE_DECIMAL = 1e18; 


/// @notice seconds in a week 


uint256 public constant WEEK = 604800; 


/// @notice starts time for emissions 


/// @dev initialized in the constructor with block.timestamp 


uint256 public immutable emissionsStartTime; 


/// @notice returns the amount of emitted TAP for a specific week 


/// @dev week is computed using (timestamp - emissionStartTime) / WEEK 


mapping(uint256 => uint256) public emissionForWeek; 


/// @notice returns the amount minted for a specific week 
/// @dev week is computed using (timestamp - emissionStartTime) / WEEK 


mapping(uint256 => uint256) public mintedInWeek; 


/// @notice returns the minter address 


address public minter; 


/// @notice LayerZero governance chain identifier 


uint256 public governanceChainldentifier; 


/// @notice returns the pause state of the contract 


bool public paused; 


/// @notice event emitted when a new minter is set 

event MinterUpdated(address indexed _old, address indexed _new); 

/// @notice event emitted when a new emission is called 

event Emitted(uint256 week, uint256 amount); 

/// @notice event emitted when new TAP is minted 

event Minted(address indexed by, address indexed to, uint256 amount); 


/// @notice event emitted when new TAP is burned 


event Burned(address indexed from, uint256 _amount); 

/// @notice event emitted when the governance chain identifier is updated 
event GovernanceChainldentifierUpdated(uint256 old, uint256 new); 

/// @notice event emitted when pause state is changed 


event PausedUpdated(bool oldState, bool newState); 


modifier notPaused() { 


require(!paused, "TAP: paused"); 


/// @notice Creates a new TAP OFT type token 

/// @dev The initial supply of 100M is not minted here as we have the wrap method 
/// @param _|zEndpoint the layer zero address endpoint deployed on the current chain 
/// @param _contributors address of the contributors 

/// @param _investors address of investors 

IIl @param _lbp address of the LBP 

/// @param _dao address of the DAO 

/// @param _airdrop address of the airdrop contract 

/// @param _governanceChainld LayerZero governance chain identifier 

/// @param _conservator address of the conservator/owner 

constructor( 


address _|zEndpoint, 


address contributors, 
address investors, 
address lbp, 
address dao, 
address _airdrop, 
uintl6 _governanceChainld, 
address _conservator 
) OFTV2("Tapioca", "TAP", 8, IzEndpoint) ERC20Permit("Tapioca") { 
require(_IzEndpoint != address(0), "LZ endpoint not valid"); 
governanceChainldentifier = _governanceChainld; 
if (_getChainld() == governanceChainldentifier) { 
_mint(_contributors, 1e18 * 15 000 000); 
_mint(_investors, 1e18 * 11 000 000); 
_mint(_Ibp, 1e18 * 5 000 000); 
_mint(_dao, 1e18 * 10 _000_000); 
_mint(_airdrop, 1e18 * 2.500 000); 
require( 
totalSupply() == INITIAL_SUPPLY, 


"initial supply not valid" 


} 


emissionsStartTime = block.timestamp; 


transferOwnership(_conservator); 


///-- Owner methods -- 
/// @notice sets the governance chain identifier 
/// @param _identifier LayerZero chain identifier 
function setGovernanceChainldentifier( 
uint256 identifier 
) external onlyOwner { 
emit GovernanceChainldentifierUpdated( 
governanceChainldentifier, 
_identifier 
); 


governanceChainldentifier = _identifier; 


/// @notice updates the pause state of the contract 
/// @param val the new value 
function updatePause(bool val) external onlyOwner { 
require(val != paused, "TAP: same state"); 
emit PausedUpdated(paused, val); 


paused = val; 


/// @notice sets a new minter address 

/// @param _minter the new address 

function setMinter(address _minter) external onlyOwner { 
require(_minter != address(0), "address not valid"); 


emit MinterUpdated(minter, _minter); 


minter = _minter; 


//-- View methods -- 
/// @notice returns token's decimals 
function decimals() public pure override returns (uint8) { 


return 18; 


/// @notice Returns the current week given a timestamp 
function timestampToWeek( 
uint256 timestamp 
) external view returns (uint256) { 
if (timestamp == 0) { 
timestamp = block.timestamp; 


} 


if (timestamp < emissionsStartTime) return 0; 


return _timestampToWeek(timestamp); 


/// @notice Returns the current week 


function getCurrentWeek() external view returns (uint256) { 


return _timestampToWeek(block.timestamp); 


/// @notice Returns the current week emission 
function getCurrentWeekEmission() external view returns (uint256) { 


return emissionForWeek[_timestampToWeek(block.timestamp)]; 


///-- Write methods -- 
/// @notice Emit the TAP for the current week 
function emitForWeek() external notPaused returns (uint256) { 


require(_getChainld() == governanceChainldentifier, "chain not valid"); 


uint256 week = _timestampToWeek(block.timestamp); 


if (emissionForWeek[week] > 0) return 0; 


// Update DSO supply from last minted emissions 


dso_supply -= mintedInWeek[week - 1]; 


// Compute unclaimed emission from last week and add it to the current week emission 
uint256 unclaimed = emissionForWeek[week - 1] - mintedInWeek[week - 1]; 

uint256 emission = uint256(_computeEmission()); 

emission += unclaimed; 


emissionForWeek[week] = emission; 


emit Emitted(week, emission); 


return emission; 


/// @notice extracts from the minted TAP 

/// @param _to Address to send the minted TAP to 

/// @param _amount TAP amount 

function extractTAP(address to, uint256 amount) external notPaused { 
require(msg.sender == minter, "unauthorized"); 


require(_amount > 0, "amount not valid"); 


uint256 week = _timestampToWeek(block.timestamp); 
require(emissionForWeek[week] >= _amount, "exceeds allowable amount"); 
_mint(_to, amount); 

mintedInWeek[ week] += amount; 


emit Minted(msg.sender, to, amount); 


/// @notice burns TAP 

/// @param _amount TAP amount 

function removeTAP(uint256 amount) external notPaused { 
_burn(msg.sender, amount); 


emit Burned(msg.sender, amount); 


///-- Internal methods -- 
function timestampToWeek( 
uint256 timestamp 


) internal view returns (uint256) { 


return ((timestamp - emissionsStartTime) / WEEK) + 1; // Starts at week 1 


///-- Private methods -- 

/// @notice Return the current chain ID. 

/// @dev Useful for testing. 

function _getChainld() private view returns (uint256) { 


return block.chainid; 


/// @notice returns the available emissions for a given supply 
function computeEmission() internal view returns (uint256 result) { 


result = (dso_ supply * decay_rate) / DECAY_RATE DECIMAL; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\sandbox\contracts\tokens/YieldBoxVaultStrat.sol-- 


// SPDX-License-Identifier: UNLICENSED 


pragma solidity 0.8.18; 


import "tapioca-sdk/dist/contracts/YieldBox/contracts/strategies/BaseStrategy.sol"; 


contract YieldBoxVaultStrat is BaseERC20Strategy { 
string public name; 


string public description; 


constructor( 
lYieldBox _yieldBox, 
address contractAddress, 
string memory _name, 
string memory _description 
) BaseERC20Strategy(_yieldBox, contractAddress) { 
name = _name; 


description = _description; 


function currentBalance() internal view override returns (uint256 amount) { 


return IERC20(contractAddress).balanceOf(address(this)); 


function deposited(uint256 amount) internal virtual override {} 


function _withdraw(address to, uint256 amount) internal virtual override {} 


----- E:/Train/makePDF/v1\tapioca-sdk-main\sandbox\contracts\tokens\interfaces/IERC20Meta 
data.sol---- 
// SPDX-License-ldentifier: MIT 


// OpenZeppelin Contracts v4.4.1 (token/ERC20/extensions/IERC20Metadata.sol) 


pragma solidity *0.8.0; 


[** 


* @dev Interface for the optional metadata functions from the ERC20 standard. 


* 

* Available since v4.1._ 

*/ 

interface IERC20Metadata { 
[** 
* @dev Returns the name of the token. 
*/ 


function name() external view returns (string memory); 


[** 
* @dev Returns the symbol of the token. 
*/ 


function symbol() external view returns (string memory); 


[** 
* @dev Returns the decimals places of the token. 


aL 


function decimals() external view returns (uint8); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\sandbox\contracts\tokens\interfaces/ITapOFT.sol- 


// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.0; 


interface ITapOFT { 


function extractTAP(address to, uint256 value) external; 


function approve(address to, uint256 value) external; 


function balanceOf(address user) external view returns (uint256); 


function emissionsStartTime() external view returns (uint256); 


function mintedInWeek(int256 week) external view returns (uint256); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\sandbox\contracts\tokens\mocks/ERC20Mock.sol- 
// SPDX-License-Identifier: UNLICENSED 
pragma solidity 0.8.18; 


import "@boringcrypto/boring-solidity/contracts/ERC20.sol"; 


contract ERC20Mock is ERC20WithSupply { 
uint8 public decimals; 
string public name; 


string public symbol; 


address public immutable owner = msg.sender; 


constructor( 
string memory _name, 
string memory _symbol, 
uint256 _initialAmount, 
uint256 decimals 

Ve 
name = _name; 
symbol = symbol; 
totalSupply = _initialAmount; 


decimals = uint8(_decimals); 


function mintTo(address to, uint256 amount) external { 


require(msg.sender == owner, "ERC20Mock: only owner"); 


_mint(_to, _amount); 


function freeMint(uint256 val) public { 
if (msg.sender != owner) { 
require(_val < 100 000 000 * 1e18, "ERC20Mock: too much"); 
} 


_mint(msg.sender, _val); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\sandbox\contracts\tokens\mocks/LzEndpointMock 
.SOl---- 


// SPDX-License-Identifier: BUSL-1.1 


pragma solidity *0.8.0; 


pragma abicoder v2; 


import "tapioca-sdk/dist/contracts/interfaces/ILayerZeroReceiver.sol"; 
import "tapioca-sdk/dist/contracts/interfaces/ILayerZeroEndpoint.sol"; 


import "tapioca-sdk/dist/contracts/libraries/LZLib.sol"; 


/* 

like a real LayerZero endpoint but can be mocked, which handle message transmission, 
verification, and receipt. 

- blocking: LayerZero provides ordered delivery of messages from a given sender to a 
destination chain. 

- non-reentrancy: endpoint has a non-reentrancy guard for both the send() and receive(), 
respectively. 

- adapter parameters: allows UAs to add arbitrary transaction params in the send() function, 
like airdrop on destination chain. 

unlike a real LayerZero endpoint, it is 

- no messaging library versioning 

- send() will short circuit to IzReceive() 

- no user application configuration 

*/ 


contract LZEndpointMock is ILayerZeroEndpoint { 


uint8 internal constant NOT_ENTERED = 1; 


uint8 internal constant ENTERED = 2; 


mapping(address => address) public IzEndpointLookup; 


uintl6 public mockChainld; 


bool public nextMsgBlocked; 


// fee config 

RelayerFeeConfig public relayerFeeConfig; 
ProtocolFeeConfig public protocolFeeConfig; 
uint256 public oracleFee; 


bytes public defaultAdapterParams; 


// path = remote addrss + local address 

// inboundNonce = [srcChainld][path]. 

mapping(uintl6 => mapping(bytes => uint64)) public inboundNonce; 
//todo: this is a hack 

// outboundNonce = [dstChainld][srcAddress] 

mapping(uintl6 => mapping(address => uint64)) public outboundNonce; 
//_ // outboundNonce = [dstChainld][path]. 

[| mapping(uintl6 => mapping(bytes => uint64)) public outboundNonce; 
// storedPayload = [srcChainld][path] 

mapping(uintl6 => mapping(bytes => StoredPayload)) public storedPayload; 
// msgToDeliver = [srcChainld][path] 


mapping(uintl6 => mapping(bytes => QueuedPayload[])) public msgsToDeliver; 


// reentrancy guard 
uint8 internal send_entered_state = 1; 


uint8 internal receive_entered_state = 1; 


struct ProtocolFeeConfig { 
uint256 zroFee; 


uint256 nativeBP; 


struct RelayerFeeConfig { 
uint128 dstPriceRatio; // 10*10 
uint128 dstGasPricelnWei; 
uint128 dstNativeAmtCap; 
uint64 baseGas; 


uint64 gasPerByte; 


struct StoredPayload { 
uint64 payloadLength; 
address dstAddress; 


bytes32 payloadHash; 


struct QueuedPayload { 


address dstAddress; 


uint64 nonce; 


bytes payload; 


modifier sendNonReentrant() { 
require( 
_send_entered_ state == NOT ENTERED, 
“"LayerZeroMock: no send reentrancy" 
); 
_send_entered_ state = ENTERED; 


r 


_send_entered_state = NOT ENTERED; 


modifier receiveNonReentrant() { 
require( 
_receive_entered_ state == NOT ENTERED, 
"LayerZeroMock: no receive reentrancy" 
); 
_receive_entered state = ENTERED; 


r 


_receive_entered_state = NOT ENTERED; 


event UaForceResumeReceive(uint16 chainld, bytes srcAddress); 


event PayloadCleared( 


uint16 srcChainld, 
bytes srcAddress, 
uint64 nonce, 
address dstAddress 

); 

event PayloadStored( 
uint16 srcChainld, 
bytes srcAddress, 
address dstAddress, 
uint64 nonce, 
bytes payload, 
bytes reason 

); 


event ValueTransferFailed(address indexed to, uint256 indexed quantity); 


constructor(uintl6 chainld) { 


mockChainld = _chainld; 


// init config 
relayerFeeConfig = RelayerFeeConfig({ 
dstPriceRatio: 1e10, // 1:1, same chain, same native coin 
dstGasPriceInWei: 1e10, 
dstNativeAmtCap: 1e19, 
baseGas: 100, 


gasPerByte: 1 


protocolFeeConfig = ProtocolFeeConfig({zroFee: 1e18, nativeBP: 1000}); // BP 0.1 
oracleFee = 1e16; 


defaultAdapterParams = LzLib.buildDefaultAdapterParams(200000); 


function send( 
uintl6 _chainld, 
bytes memory _path, 
bytes calldata payload, 
address payable _refundAddress, 
address _zroPaymentAddress, 
bytes memory _adapterParams 
) external payable override sendNonReentrant { 
require( 
_path.length == 40, 
“LayerZeroMock: incorrect remote address size" 


); // only support evm chains 


address dstAdadr; 
assembly { 


dstAddr := mload(add(_path, 20)) 


address IzEndpoint = IzEndpointLookup[dstAddr]; 


require( 


IzEndpoint != address(0), 


"LayerZeroMock: destination LayerZero Endpoint not found" 


// not handle zro token 

bytes memory adapterParams = _adapterParams.length > 0 
? adapterParams 
: defaultAdapterParams; 

(uint256 nativeFee, ) = estimateFees( 
_Cchainld, 
msg.sender, 
_payload, 
_zroPaymentAddress != address(0x0), 
adapterParams 

); 

require( 
msg.value >= nativeFee, 


"LayerZeroMock: not enough native for fees" 


uint64 nonce = ++outboundNonce[_chainld][msg.sender]; 


// refund if they send too much 
uint256 amount = msg.value - nativeFee; 
if (amount > 0) { 


(bool success, ) = _refundAddress.call{value: amount}(""); 


require(success, "LayerZeroMock: failed to refund"); 


// Mock the process of receiving msg on dst chain 


// Mock the relayer paying the dstNativeAddr the amount of extra native token 


( 


d 


uint256 extraGas, 
uint256 dstNativeAmt, 
address payable dstNativeAddr 
) = LzLib.decodeAdapterParams(adapterParams); 
if (dstNativeAmt > 0) { 
(bool success, ) = dstNativeAddr.call{value: dstNativeAmt}(""); 
if (!'success) { 


emit ValueTransferFailed(dstNativeAddr, dstNativeAmt); 


bytes memory srcUaAddress = abi.encodePacked(msg.sender, dstAddr); // cast this 
address to bytes 
bytes memory payload = _payload; 
LZEndpointMock(IzEndpoint).receivePayload( 
mockChainld, 
srcUaAddress, 
dstAddr, 


nonce, 


extraGas, 


payload 


function receivePayload( 
uint16 _srcChainld, 
bytes calldata path, 
address dstAddress, 
uint64 nonce, 
uint256 _gasLimit, 
bytes calldata payload 
) external override receiveNonReentrant { 


StoredPayload storage sp = storedPayload[_srcChainld][_path]; 


// assert and increment the nonce. no message shuffling 
require( 
_nonce == ++inboundNonce[_srcChainld][_path], 


“"LayerZeroMock: wrong nonce" 


// queue the following msgs inside of a stack to simulate a successful send on src, but 
not fully delivered on dst 
if (Sp.payloadHash != bytes32(0)) { 
QueuedPayload[] storage msgs = msgsToDeliver[_srcChainld][_path]; 


QueuedPayload memory newMsg = QueuedPayload( 


_dstAddress, 
_nonce, 


_payload 


// warning, might run into gas issues trying to forward through a bunch of queued 
msgs 
// shift all the msgs over so we can treat this like a fifo via array.pop() 
if (msgs.length > 0) { 
// extend the array 


msgs.push(newMsg); 


// shift all the indexes up for pop() 
for (uint256 i = 0; i < msgs.length - 1; i++) { 


msgs[i + 1] = msgs[i]; 


// put the newMsg at the bottom of the stack 
msgs[0] = newMsg; 

} else { 
msgs.push(newMsg); 

} 

} else if (nextMsgBlocked) { 

storedPayload[_srcChainld][_path] = StoredPayload( 

uint64(_payload.length), 


_dstAddress, 


keccak256(_payload) 
); 
emit PayloadStored( 
_srcChainld, 
_path, 
_dstAddress, 
_nonce, 
_payload, 
bytes("") 
); 
// ensure the next msgs that go through are no longer blocked 
nextMsgBlocked = false; 
} else { 
try 
lILayerZeroReceiver(_dstAddress).IzReceive{gas: _gasLimit}( 
_srcChainld, 
_path, 
_nonce, 
_payload 
) 
{} catch (bytes memory reason) { 
storedPayload[_srcChainld][_path] = StoredPayload( 
uint64(_payload.length), 
_dstAddress, 


keccak256(_payload) 


emit PayloadStored( 
_srcChainld, 
_path, 
_dstAddress, 
_nonce, 
_payload, 
reason 
); 
// ensure the next msgs that go through are no longer blocked 


nextMsgBlocked = false; 


function getInboundNonce( 
uintl6 _chainlD, 
bytes calldata path 
) external view override returns (uint64) { 


return inboundNonce[_chainID][_path]; 


function getOutboundNonce( 
uintl6 _chainlD, 
address _srcAddress 
) external view override returns (uint64) { 


return outboundNonce[_chainID][_srcAddress]; 


function estimateFees( 
uintl6 _dstChainld, 
address _userApplication, 
bytes memory _payload, 
bool paylnZRO, 


bytes memory _adapterParams 


) public view override returns (uint256 nativeFee, uint256 zroFee) { 


bytes memory adapterParams = _adapterParams.length > 0 


? adapterParams 


: defaultAdapterParams; 


// Relayer Fee 
uint256 relayerFee = getRelayerFee( 
_dstChainld, 
1, 
_userApplication, 
_payload.length, 


adapterParams 


// LayerZero Fee 


uint256 protocolFee = _getProtocolFees( 


_paylnZRO, 


relayerFee, 


oracleFee 
); 


_paylnZRO ? zroFee = protocolFee : nativeFee = protocolFee; 


// return the sum of fees 


nativeFee = nativeFee + relayerFee + oracleFee; 


function getChainld() external view override returns (uint16) { 


return mockChainld; 


function retryPayload( 
uint16 _srcChainld, 
bytes calldata _path, 
bytes calldata payload 
) external override { 
StoredPayload storage sp = storedPayload[_srcChainld][_path]; 
require( 
sp.payloadHash != bytes32(0), 
"LayerZeroMock: no stored payload" 
); 
require( 
_payload.length == sp.payloadLength && 
keccak256(_payload) == sp.payloadHash, 


"LayerZeroMock: invalid payload" 


address dstAddress = sp.dstAddress; 
// empty the storedPayload 
sp.payloadLength = 0; 
sp.dstAddress = address(0); 


sp.payloadHash = bytes32(0); 


uint64 nonce = inboundNonce[_srcChainld][_path]; 


lILayerZeroReceiver(dstAddress).IzReceive( 
_srcChainld, 
_path, 
nonce, 
_payload 
); 


emit PayloadCleared(_srcChainld, _path, nonce, dstAddress); 


function hasStoredPayload( 
uint16 _srcChainld, 
bytes calldata _path 
) external view override returns (bool) { 
StoredPayload storage sp = storedPayload[_srcChainld][_path]; 


return sp.payloadHash != bytes32(0); 


function getSendLibraryAddress( 
address 
) external view override returns (address) { 


return address(this); 


function getReceiveLibraryAddress( 
address 
) external view override returns (address) { 


return address(this); 


function isSendingPayload() external view override returns (bool) { 


return send_entered_state == ENTERED; 


function isReceivingPayload() external view override returns (bool) { 


return _receive_entered_state == ENTERED; 


function getConfig( 
uint16 /*_version*/, 
uint16 /*_chainld*/, 
address /*_ua*/, 


uint256 /*_configType*/ 


) external pure override returns (bytes memory) { 


return ""; 


function getSendVersion( 
address /*_userApplication*/ 
) external pure override returns (uint16) { 


return 1; 


function getReceiveVersion( 
address /*_userApplication*/ 
) external pure override returns (uint16) { 


return 1; 


function setConfig( 
uint16 /*_version*/, 
uint16 /*_chainld*/, 
uint256 /*_configType*/, 
bytes memory /*_config*/ 


) external override {} 


function setSendVersion(uint16 /*version*/) external override { } 


function setReceiveVersion(uint16 /*version*/) external override {} 


function forceResumeReceive( 
uint16 _srcChainld, 
bytes calldata path 
) external override { 
StoredPayload storage sp = storedPayload[_srcChainld][_path]; 
// revert if no messages are cached. safeguard malicious UA behaviour 
require( 
sp.payloadHash != bytes32(0), 
"LayerZeroMock: no stored payload" 
); 


require(sp.dstAddress == msg.sender, "LayerZeroMock: invalid caller"); 


// empty the storedPayload 
sp.payloadLength = 0; 
sp.dstAddress = address(0); 


sp.payloadHash = bytes32(0); 


emit UaForceResumeReceive(_srcChainld, _path); 


// resume the receiving of msgs after we force clear the "stuck" msg 


_clearMsgQue(_srcChainld, _path); 


| | ------------------------------ Other Public/External Functions 


function getLengthOfQueue( 
uint16 _srcChainld, 
bytes calldata srcAddress 

) external view returns (uint256) { 


return msgsToDeliver[_srcChainld][_srcAddress].length; 


// used to simulate messages received get stored as a payload 
function blockNextMsg() external { 


nextMsgBlocked = true; 


function setDestLzEndpoint( 
address destAddr, 
address IzEndpointAddr 

) external { 


IzZEndpointLookup[destAddr] = IzEndpointAddr; 


function setRelayerPrice( 
uintl28 _dstPriceRatio, 
uintl28 dstGasPricelnWei, 
uintl28 dstNativeAmtCap, 
uint64 baseGas, 


uint64 gasPerByte 


) external { 
relayerFeeConfig.dstPriceRatio = _dstPriceRatio; 
relayerFeeConfig.dstGasPricelnWei = _dstGasPricelnWei; 
relayerFeeConfig.dstNativeAmtCap = _dstNativeAmtCap; 
relayerFeeConfig.baseGas = _baseGas; 


relayerFeeConfig.gasPerByte = gasPerByte; 


function setProtocolFee(uint256 zroFee, uint256 _nativeBP) external { 
protocolFeeConfig.zroFee = _zroFee; 


protocolFeeConfig.nativeBP = _nativeBP; 


function setOracleFee(uint256 oracleFee) external { 


oracleFee = _oracleFee; 


function setDefaultAdapterParams(bytes memory _adapterParams) external { 


defaultAdapterParams = _adapterParams; 


// simulates the relayer pushing through the rest of the msgs that got delayed due to the 
stored payload 
function clearMsgQue(uint16 srcChainld, bytes calldata path) internal { 


QueuedPayload[] storage msgs = msgsToDeliver[_srcChainld][_path]; 


// warning, might run into gas issues trying to forward through a bunch of queued msgs 
while (msgs.length > 0) { 
QueuedPayload memory payload = msgs[msgs.length - 1]; 
lILayerZeroReceiver(payload.dstAddress).IzReceive( 
_srcChainld, 
_path, 
payload.nonce, 
payload.payload 
); 


msgs.pop(); 


function _getProtocolFees( 
bool paylnZro, 
uint256_ _relayerFee, 
uint256 oracleFee 
) internal view returns (uint256) { 
if (_paylnZro) { 
return protocolFeeConfig.zroFee; 
} else { 
return 
((_relayerFee + _oracleFee) * protocolFeeConfig.nativeBP) / 


10000; 


function getRelayerFee( 
uint16 /* _dstChainld */, 
uint16 /* outboundProofType */, 
address /* _userApplication */, 
uint256 _payloadSize, 
bytes memory _adapterParams 
) internal view returns (uint256) { 
(uint16 txType, uint256 extraGas, uint256 dstNativeAmt, ) = LzLib 
.decodeAdapterParams(_adapterParams); 
uint256 totalRemoteToken; // = baseGas + extraGas + requiredNativeAmount 
if (txType == 2) { 
require( 
relayerFeeConfig.dstNativeAmtCap >= dstNativeAmt, 
“"LayerZeroMock: dstNativeAmt too large " 
); 
totalRemoteToken += dstNativeAmt; 
} 
// remoteGasTotal = dstGasPricelnWei * (baseGas + extraGas) 
uint256 remoteGasTotal = relayerFeeConfig.dstGasPricelnWei * 
(relayerFeeConfig.baseGas + extraGas); 


totalRemoteToken += remoteGasTotal: 


// tokenConversionRate = dstPrice / localPrice 


// basePrice = totalRemoteToken * tokenConversionRate 


uint256 basePrice = (totalRemoteToken * 


relayerFeeConfig.dstPriceRatio) / 10 ** 10; 


// pricePerByte = (dstGasPricelnWei * gasPerBytes) * tokenConversionRate 
uint256 pricePerByte = (relayerFeeConfig.dstGasPricelnWei * 
relayerFeeConfig.gasPerByte * 


relayerFeeConfig.dstPriceRatio) / 10 ** 10; 


return basePrice + _payloadSize * pricePerByte; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts/StargateComposed.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity “0.8.4; 


pragma abicoder v2; 


import "@openzeppelin/contracts/utils/math/SafeMath.sol"; 

//import "@openzeppelin/contracts/access/Ownable.sol"; 

import "@openzeppelin/contracts/token/ERC20/IERC20.sol"; 

import "@uniswap/v2-periphery/contracts/interfaces/IUniswapV2Router02.sol"; 
import "./interfaces/IStargateRouter.sol"; 


import "./interfaces/IStargateReceiver.sol"; 


contract StargateComposed is IStargateReceiver { 
using SafeMath for uint; 
address public stargateRouter; // an IStargateRouter instance 


address public ammRouter; // an |UniswapV2Router02 instance 


// special token value that indicates the sgReceive() should swap OUT native asset 
address public OUT TO NATIVE = 0x0000000000000000000000000000000000000000; 


event ReceivedOnDestination(address token, uint qty); 


constructor(address stargateRouter, address ammRouter) { 
stargateRouter = stargateRouter; 


ammRouter = _ammRouter; 


// 1. swap native on source chain to native on destination chain (!) 
function swapNativeForNative( 
uint16 dstChainld, // Stargate/LayerZero chainld 
address bridgeToken, // the address of the native ERC20 to swap() - *must* be the 
token for the poolld 
uint16 srcPoolld, // stargate poolld - *must* be the poolld for the bridgeToken asset 
uint16 dstPoolld, // stargate destination poolld 
uint nativeAmountin, // exact amount of native token coming in on source 
address to, // the address to send the destination tokens to 
uint amountOutMin, // minimum amount of stargatePoolld token to get out of amm 
router 
uint amountOutMinSg, // minimum amount of stargatePoolld token to get out on 
destination chain 
uint amountOutMinDest, // minimum amount of native token to receive on destination 
uint deadline, // overall deadline 
address destStargateComposed // destination contract. it must implement sgReceive() 
) external payable { 
require(nativeAmountin > 0, "nativeAmountin must be greater than 0"); 
require( 
msg.value.sub(nativeAmountin) > 0, 


"stargate requires fee to pay crosschain message" 


uint bridgeAmount; 


// using the amm router, swap native into the Stargate pool token, sending the output 
token to this contract 
{ 
// create path[] for amm swap 
address[] memory path = new address[](2); 
path[0] = IUniswapV2Router02(ammRouter).WETH(); // native IN requires that we 
specify the WETH in path[0] 


path[1] = bridgeToken; // the bridge token, 


uint[] memory amounts = I[UniswapV2Router02(ammRouter) 
.SwapExactETHForTokens{value: nativeAmountin}( 
amountOutMin, 
path, 
address(this), 


deadline 


bridgeAmount = amounts[1]; 
require( 
bridgeAmount > 0, 


"error: ammRouter gave us 0 tokens to swap() with stargate" 


// this contract needs to approve the stargateRouter to spend its path[1] token! 


IERC20(bridgeToken).approve(address(stargateRouter), bridgeAmount); 


// encode payload data to send to destination contract, which it will handle with 
sgReceive() 
bytes memory data; 
{ 


data = abi.encode(OUT_TO_NATIVE, deadline, amountOutMinDest, to); 


// Stargate's Router.swap() function sends the tokens to the destination chain. 
IStargateRouter(stargateRouter).swap{ 
value: msg.value.sub(nativeAmountin) 
}( 
dstChainld, // the destination chain id 
srcPoolld, // the source Stargate poolld 
dstPoolld, // the destination Stargate poolld 
payable(msg.sender), // refund adddress. if msg.sender pays too much gas, return 
extra eth 
bridgeAmount, // total tokens to send to destination chain 
amountOutMinSg, // minimum 
IStargateRouter.IzTxObj(500000, 0, "0x"), // 500,000 for the sgReceive() 
abi.encodePacked(destStargateComposed), // destination address, the sgReceive() 
implementer 


data // bytes payload 


// sgReceive() - the destination contract must implement this function to receive the 
tokens and payload 
function sgReceive( 
uint16 /*_chainld*/, 
bytes memory /*_srcAddress*/, 
uint /*_nonce*/, 
address token, 
uint amountLD, 
bytes memory payload 
) external override { 
require( 
msg.sender == address(stargateRouter), 


"only stargate router can call sgReceive!" 


address tokenOut, 
uint deadline, 

uint amountOutMin, 
address _toAddr 


) = abi.decode(payload, (address, uint, uint, address)); 


// so that router can swap our tokens 


IERC20(_token).approve(address(ammRouter), amountLD); 


uint toBalancePreTransferOut = address(_toAddr).balance; 


if ( tokenOut == address(0x0)) { 
// they want to get out native tokens 
address[] memory path = new address[](2); 
path[0] = token; 


path[1] = IUniswapV2Router02(ammRouter).WETH(); 


// use ammRouter to swap incoming bridge token into native tokens 
try 
IUniswapV2Router02(ammRouter).swapExactTokensForETH( 
amountLD, // the stable received from stargate at the destination 
_amountOutMin, // slippage param, min amount native token out 
path, // path[0]: stabletoken address, path[1]: WETH from sushi router 
_toAddr, // the address to send the *out* native to 


_deadiline // the unix timestamp deadline 


// success, the ammRouter should have sent the eth to them 
emit ReceivedOnDestination( 
OUT_TO_NATIVE, 
address(_toAddr).balance.sub(_toBalancePreTransferOut) 
); 
} catch { 
// send transfer token/amountLD to msg.sender because the swap failed for some 


reason 


IERC20(_token).transfer(_toAddr, amountLD); 


emit ReceivedOnDestination(_token, amountLD); 
} 
} else { 
// they want to get out erc20 tokens 
uint toAddrTokenBalancePre = IERC20(_tokenOut).balanceOf(_toAddr); 
address[] memory path = new address[](2); 
path[0] = token; 
path[1] = _tokenOut; 


try 


IUniswapV2Router02(ammRouter).swapExactTokensForTokens( 
amountLD, // the stable received from stargate at the destination 
_amountOutMin, // slippage param, min amount native token out 


path, // path[0]: stabletoken address, path[1]: WETH from sushi router 
_toAddr, // the address to send the *out* tokens to 


_deadiline // the unix timestamp deadline 


// success, the ammRouter should have sent the eth to them 
emit ReceivedOnDestination( 

_tokenOut, 

IERC20(_tokenOut).balanceOf(_toAddr).sub( 


_toAddrTokenBalancePre 


); 


} catch { 


// transfer _token/amountLD to msg.sender because the swap failed for some 


reason. 
// this is not the ideal scenario, but the contract needs to deliver them eth or 
USDC. 
IERC20(_token).transfer(_toAddr, amountLD); 
emit ReceivedOnDestination(_token, amountLD); 
} 
} 
} 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\contracts-upgradable\example/Exa 
mpleOFTUpgradeable.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.2; 


import "hardhat-deploy/solc_0.8/proxy/Proxied.sol"; 


import "../token/OFT/OFTUpgradeable.sol"; 


contract ExampleOFTUpgradeable is Initializable, OFTUpgradeable, Proxied { 
function initialize(string memory _name, string memory _symbol, uint _initialSupply, 
address _|zEndpoint) public initializer { 


__ExampleOFTUpgradeable _init(_name, symbol, initialSupply, IzEndpoint); 


function _ ExampleOFTUpgradeable _init(string memory _name, string memory _symbol, 
uint initialSupply, address |zEndpoint) internal onlylnitializing { 
__Ownable _init(); 
__OFTUpgradeable _init(_name, symbol, |IzEndpoint); 
__ExampleOFTUpgradeable_init_unchained(_name, symbol, _initialSupply, 
_IzEndpoint); 


} 


function _ ExampleOFTUpgradeable_init_unchained(string memory, string memory, uint 
_initialSupply, address) internal onlylnitializing { 


_mint(_msgSender(), _initialSupply); 


[** 

* @dev This empty reserved space is put in place to allow future versions to add new 
* variables without shifting down storage in the inheritance chain. 

* See https://docs.openzeppelin.com/contracts/4.x/upgradeable#storage gaps 

4 


uint[50] private gap; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\contracts-upgradable\example/Exa 
mpleONFT721Upgradeable.sol---- 


// SPDX-License-Identifier: BUSL-1.1 


pragma solidity *0.8.2; 


import "hardhat-deploy/solc_0.8/proxy/Proxied.sol"; 


import "../token/ONFT721/ONFT721Upgradeable.sol"; 


contract ExampleONFT721Upgradeable is Initializable, ONFT721Upgradeable, Proxied { 
function initialize(string memory _name, string memory _symbol, address _|zEndpoint) 
public initializer { 


__ONFT721UpgradeableMock_init(_name, symbol, _IzEndpoint); 


function _ONFT721UpgradeableMock_init(string memory _name, string memory symbol, 
address _|zEndpoint) internal onlylnitializing { 
__Ownable _init(); 


__ONFT721Upgradeable_init(_name, symbol, IzEndpoint); 


function — ONFT721UpgradeableMock_init_unchained(string memory _name, string 


memory symbol, address _|zEndpoint) internal onlyInitializing {} 


function mint(address tokenOwner, uint newld) external payable { 


_safeMint(_tokenOwner, _newld); 


[** 

* @dev This empty reserved space is put in place to allow future versions to add new 
* variables without shifting down storage in the inheritance chain. 

* See https://docs.openzeppelin.com/contracts/4.x/upgradeable#storage gaps 

4 


uint[50] private gap; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\contracts-upgradable\interfaces/ILa 
yerZeroEndpointUpgradeable.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.2; 


import "./ILayerZeroUserApplicationConfigUpgradeable.sol"; 


interface ILayerZeroEndpointUpgradeable is ILayerZeroUserApplicationConfigUpgradeable { 
// @notice send a LayerZero message to the specified address at a LayerZero endpoint. 
// @param _dstChainld - the destination chain identifier 
// @param _destination - the address on destination chain (in bytes). address 
length/format may vary by chains 
// @param _payload - a custom bytes payload to send to the destination contract 
// @param _refundAdadress - if the source transaction is cheaper than the amount of value 
passed, refund the additional amount to this address 
// @param _zroPaymentAddress - the address of the ZRO token holder who would pay for 
the transaction 
// @param _adapterParams - parameters for custom functionality. e.g. receive airdropped 
native gas from the relayer on destination 
function send(uintl6 _dstChainld, bytes calldata destination, bytes calldata payload, 
address payable _refundAddress, address —_zroPaymentAddress, bytes calldata 


_adapterParams) external payable; 


// @notice used by the messaging library to publish verified payload 


// @param _srcChainld - the source chain identifier 


// @param _srcAddress - the source contract (as bytes) at the source chain 
// @param _dstAddress - the address on destination chain 
// @param _nonce - the unbound message ordering nonce 
// @param _gasLimit - the gas limit for external contract execution 
// @param _payload - verified payload to send to the destination contract 
function receivePayload(uintl6 —_srcChainld, bytes calldata _srcAddress, address 


_dstAddress, uint64 nonce, uint gasLimit, bytes calldata_ payload) external; 


// @notice get the inboundNonce of a IzApp from a source chain which could be EVM or 
non-EVM chain 

// @param _srcChainld - the source chain identifier 

// @param _srcAddress - the source chain contract address 

function getInboundNonce(uint16 _srcChainld, bytes calldata srcAddress) external view 


returns (uint64); 


// @notice get the outboundNonce from this source chain which, consequently, is always 
an EVM 
// @param _srcAddress - the source chain contract address 
function getOutboundNonce(uint16 _dstChainld, address _srcAddress) external view 


returns (uint64); 


// @notice gets a quote in source native gas, for the amount that send() requires to pay 
for message delivery 

// @param _dstChainld - the destination chain identifier 

// @param _userApplication - the user app address on this EVM chain 


// @param _payload - the custom message to send over LayerZero 


// @param _payInZRO - if false, user app pays the protocol fee in native token 
// @param _adapterParam - parameters for the adapter service, e.g. send some dust 
native token to dstChain 
function estimateFees(uintl16 _dstChainld, address _userApplication, bytes calldata 
_payload, bool _paylnZRO, bytes calldata _adapterParam) external view returns (uint 


nativeFee, uint zroFee); 


// @notice get this Endpoint's immutable source identifier 


function getChainld() external view returns (uint16); 


// @notice the interface to retry failed message on this Endpoint destination 
// @param _srcChainld - the source chain identifier 
// @param _srcAddress - the source chain contract address 
// @param _payload - the payload to be retried 
function retryPayload(uintl6 _srcChainld, bytes calldata _srcAddress, bytes calldata 


_payload) external; 


// @notice query if any STORED payload (message blocking) at the endpoint. 

// @param _srcChainld - the source chain identifier 

// @param _srcAddress - the source chain contract address 

function hasStoredPayload(uint16 srcChainld, bytes calldata srcAddress) external view 


returns (bool); 


// @notice query if the _libraryAddress is valid for sending msgs. 
// @param _userApplication - the user app address on this EVM chain 


function getSendLibraryAddress(address _userApplication) external view returns 


(address); 


// @notice query if the _libraryAddress is valid for receiving msgs. 
// @param _userApplication - the user app address on this EVM chain 
function getReceiveLibraryAddress(address _userApplication) external view returns 


(address); 


// @notice query if the non-reentrancy guard for send() is on 
// @return true if the guard is on. false otherwise 


function isSendingPayload() external view returns (bool); 


// @notice query if the non-reentrancy guard for receive() is on 
// @return true if the guard is on. false otherwise 


function isReceivingPayload() external view returns (bool); 


// @notice get the configuration of the LayerZero messaging library of the specified 
version 
// @param _version - messaging library version 
// @param _chainld - the chainld for the pending config change 
// @param _userApplication - the contract address of the user application 
// @param _configType - type of configuration. every messaging library has its own 
convention. 
function getConfig(uintl6 _version, uintl6 _chainld, address _userApplication, uint 


_configType) external view returns (bytes memory); 


// @notice get the send() LayerZero messaging library version 


// @param _userApplication - the contract address of the user application 


function getSendVersion(address _userApplication) external view returns (uint16); 


// @notice get the IzReceive() LayerZero messaging library version 
// @param _userApplication - the contract address of the user application 


function getReceiveVersion(address _userApplication) external view returns (uint16); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\contracts-upgradable\interfaces/ILa 
yerZeroReceiverUpgradeable.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.2; 


interface ILayerZeroReceiverUpgradeable { 
// @notice LayerZero endpoint will invoke this function to deliver the message on the 
destination 
// @param _srcChainld - the source endpoint identifier 
// @param _srcAddress - the source sending contract address from the source chain 
// @param _nonce - the ordered message nonce 
// @param _payload - the signed payload is the UA bytes has encoded to be sent 
function IzReceive(uintl6 srcChainld, bytes calldata srcAddress, uint64 nonce, bytes 
calldata_ payload) external; 


} 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\contracts-upgradable\interfaces/ILa 
yerZeroUserApplicationConfigUpgradeable.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.2; 


interface ILayerZeroUserApplicationConfigUpgradeable { 
// @notice set the configuration of the LayerZero messaging library of the specified 
version 
// @param _version - messaging library version 
// @param _chainld - the chainld for the pending config change 
// @param _configType - type of configuration. every messaging library has its own 
convention. 
// @param _config - configuration in the bytes. can encode arbitrary content. 
function setConfig(uintl6 version, uintl6 _chainld, uint _configType, bytes calldata 


_config) external; 


// @notice set the send() LayerZero messaging library version to version 
// @param _version - new messaging library version 


function setSendVersion(uintl6 version) external; 


// @notice set the IzReceive() LayerZero messaging library version to version 


// @param _version - new messaging library version 


function setReceiveVersion(uint16 version) external; 


// @notice Only when the UA needs to resume the message flow in blocking mode and 


clear the stored payload 
// @param _srcChainld - the chainld of the source chain 
// @param _srcAddress - the contract address of the source contract at the source chain 


function forceResumeReceive(uintl6 _srcChainld, bytes calldata _srcAddress) external; 


waa E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\contracts-upgradable\lzApp/LZAppU 
pgradeable.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.2; 


import "@openzeppelin/contracts-upgradeable/access/OwnableUpgradeable.sol"; 
import "../interfaces/ILayerZeroReceiverUpgradeable.sol"; 
import "../interfaces/ILayerZeroUserApplicationConfigUpgradeable.sol"; 


import "../interfaces/ILayerZeroEndpointUpgradeable.sol"; 


[* 
* a generic LzReceiver implementation 
Hk 
abstract contract LzAppUpgradeable is Initializable, OwnableUpgradeable, 
ILayerZeroReceiverUpgradeable, ILayerZeroUserApplicationConfigUpgradeable { 
ILayerZeroEndpointUpgradeable public IzEndpoint; 
mapping(uintl6 => bytes) public trustedRemoteLookup; 


mapping(uintl6 => mapping(uint => uint)) public minDstGasLookup; 


event SetTrustedRemote(uint16 srcChainld, bytes srcAddress); 


event SetMinDstGasLookup(uint16 _dstChainld, uint type, uint dstGasAmount); 


function _LzAppUpgradeable _init(address endpoint) internal onlyInitializing { 


__LzAppUpgradeable_init_unchained(_endpoint); 


function _LzAppUpgradeable_init_unchained(address endpoint) internal onlylInitializing { 


IzEndpoint = ILayerZeroEndpointUpgradeable(_endpoint); 


function IzReceive(uintl16 srcChainld, bytes memory _srcAddress, uint64 _nonce, bytes 
memory _payload) public virtual override { 
// IzReceive must be called by the endpoint for security 


require(_msgSender() == address(IzEndpoint), "LzApp: invalid endpoint caller"); 


bytes memory trustedRemote = trustedRemoteLookup[_srcChainld]; 
// if will still block the message pathway from (srcChainld, srcAddress). should not 
receive message from untrusted remote. 
require(_srcAddress.length == trustedRemote.length && keccak256(_srcAddress) == 


keccak256(trustedRemote), "LzApp: invalid source sending contract"); 


_blockingLzReceive(_srcChainld, srcAddress, nonce, payload); 


// abstract function - the default behaviour of LayerZero is blocking. See: 
NonblockingLzApp if you dont need to enforce ordered messaging 
function _blockingLzReceive(uint16 _srcChainld, bytes memory _srcAddress, uint64 


_nonce, bytes memory _payload) internal virtual; 


function _IzSend(uintl6 —_dstChainld, bytes memory _payload, address payable 


_refundAddress, address _zroPaymentAddress, bytes memory _adapterParams) internal 


virtual { 


bytes memory trustedRemote = trustedRemoteLookup[_dstChainld]; 
require(trustedRemote.length != 0, "LzApp: destination chain is not a trusted source"); 


IzEndpoint.send{value: msg.value}(_dstChainld, trustedRemote, _payload, 
_refundAddress, _zroPaymentAddress, adapterParams); 


} 


function _checkGasLimit(uintl16 _dstChainld, uint type, bytes memory _adapterParams, 


uint _extraGas) internal view { 
uint providedGasLimit = getGasLimit(_adapterParams); 
uint minGasLimit = minDstGasLookup[_dstChainld][_type] + _extraGas; 
require(minGasLimit > 0, "LzApp: minGasLimit not set"); 


require(providedGasLimit >= minGasLimit, "LzApp: gas limit is too low"); 


function getGasLimit(bytes memory _adapterParams) public pure returns (uint gasLimit) { 


assembly { 


gasLimit := mload(add(_adapterParams, 34)) 


function getConfig(uint16 version, uintl6 _chainld, address, uint _configType) external 


view returns (bytes memory) { 


return IzEndpoint.getConfig(_version, chainld, address(this), configType); 


// generic config for LayerZero user Application 
function setConfig(uintl6 version, uintl6 _chainld, uint _configType, bytes calldata 
_config) external override onlyOwner { 


IzEndpoint.setConfig(_version, chainld, configType, config); 


function setSendVersion(uint16 version) external override onlyOwner { 


IzEndpoint.setSendVersion(_version); 


function setReceiveVersion(uint16 version) external override onlyOwner { 


IzEndpoint.setReceiveVersion(_version); 


function forceResumeReceive(uintl6 _srcChainld, bytes calldata _srcAddress) external 


override onlyOwner { 


IzEndpoint.forceResumeReceive(_srcChainld, _srcAddress); 


// allow owner to set it multiple times. 
function setTrustedRemote(uintl6 —srcChainld, bytes calldata _srcAddress) external 
onlyOwner { 
trustedRemoteLookup[_srcChainld] = _srcAddress; 


emit SetTrustedRemote(_srcChainld, _srcAddress); 


function setMinDstGasLookup(uintl6 _dstChainld, uint _type, uint _dstGasAmount) 
external onlyOwner { 

require(_dstGasAmount > 0, "LzApp: invalid _dstGasAmount"); 

minDstGasLookup|[_dstChainld][_type] = _dstGasAmount; 


emit SetMinDstGasLookup(_dstChainld, type, dstGasAmount); 


function isTrustedRemote(uint16 _srcChainld, bytes calldata _srcAddress) external view 
returns (bool) { 
bytes memory trustedSource = trustedRemoteLookup[_srcChainld]; 


return keccak256(trustedSource) == keccak256(_srcAddress); 


[** 

* @dev This empty reserved space is put in place to allow future versions to add new 
* variables without shifting down storage in the inheritance chain. 

* See https://docs.openzeppelin.com/contracts/4.x/upgradeable#storage gaps 
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uint[50] private _ gap; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\contracts-upgradable\lzApp/Nonbloc 
kingLzAppUpgradeable.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.2; 


import "./LzAppUpgradeable.sol"; 


[* 

* the default LayerZero messaging behaviour is blocking, i.e. any failed message will block 
the channel 

* this abstract class try-catch all fail messages and store locally for future retry. hence, 
non-blocking 

* NOTE: if the srcAddress is not configured properly, it will still block the message pathway 
from (srcChainld, srcAddress) 

*/ 

abstract contract NonblockingLzAppUpgradeable is Initializable, LzAppUpgradeable { 


function _ NonblockingLzAppUpgradeable _init(address endpoint) internal onlylnitializing 


__NonblockingLzAppUpgradeable_init_unchained(_endpoint); 


function _— NonblockingLzAppUpgradeable_init_unchained(address _endpoint) internal 


onlylnitializing { 


__LzAppUpgradeable_init_unchained(_endpoint); 


Mapping(uintl6 => mapping(bytes 


=> mapping(uint6é4 => bytes32))) public 
failedMessages; 


event MessageFailed(uintl6 _srcChainld, bytes _srcAddress, uint64 _nonce, bytes 
_payload); 


// overriding the virtual function in LzReceiver 


function _blockingLzReceive(uintl16 —srcChainld, bytes memory _srcAddress, uint64 
_nonce, bytes memory _payload) internal virtual override { 
// try-catch all errors/exceptions 
try this.nonblockingLzReceive(_srcChainld, srcAddress, nonce, payload) { 
// do nothing 
} catch { 


// error / exception 


failedMessages[_srcChainld][_srcAddress][_nonce] = keccak256(_payload); 


emit MessageFailed(_srcChainld, srcAddress, nonce, payload); 


function nonblockingLzReceive(uintl6 _srcChainld, bytes memory _srcAddress, uint64 
_nonce, bytes memory _payload) public virtual { 


// only internal transaction 


require(_msgSender() == address(this), "NonblockingLzApp: caller must be LzApp"); 


_nonblockingLzReceive(_srcChainld, srcAddress, nonce, payload); 


//@notice override this function 
function _nonblockingLzReceive(uintl16 srcChainld, bytes memory _srcAddress, uint64 


_nonce, bytes memory _payload) internal virtual; 


function retryMessage(uintl6 _srcChainld, bytes memory _srcAddress, uint64 _nonce, 
bytes memory _payload) public payable virtual { 

// assert there is message to retry 

bytes32 payloadHash = failedMessages[_srcChainld][_srcAddress][_nonce]; 

require(payloadHash != bytes32(0), "NonblockingLzApp: no stored message"); 

require(keccak256(_payload) == payloadHash, "NonblockingLzApp: invalid payload"); 

// clear the stored message 

failedMessages[_srcChainld][_srcAddress][_nonce] = bytes32(0); 

// execute the message. revert if it fails again 


_nonblockingLzReceive(_srcChainld, srcAddress, nonce, payload); 


[** 

* @dev This empty reserved space is put in place to allow future versions to add new 
* variables without shifting down storage in the inheritance chain. 

* See https://docs.openzeppelin.com/contracts/4.x/upgradeable#storage gaps 

*/ 


uint[50] private __gap; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\contracts-upgradable\token\OFT/IOF 
TCoreUpgradeable.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.2; 


import "@openzeppelin/contracts-upgradeable/utils/introspection/IERC165Upgradeable.sol"; 


[** 
* @dev Interface of the IOFT core standard 
*/ 
interface IOFTCoreUpgradeable is IERC165Upgradeable { 
[** 
* @dev estimate send token `_tokenlid` to (`_dstChainlid`, `_toAddress`) 
* dstChainld - LO defined chain id to send tokens too 
* toAddress - dynamic bytes array which contains the address to whom you are sending 
tokens to on the dstChain 
* amount - amount of the tokens to transfer 
* useZro - indicates to use zro to pay LO fees 
* adapterParam - flexible bytes array to indicate messaging adapter services in LO 
*/ 
function estimateSendFee(uint16 _dstChainld, bytes calldata _toAddress, uint _amount, 
bool _useZro, bytes calldata _adapterParams) external view returns (uint nativeFee, uint 


zroFee); 


[** 


* @dev send `_amount`" amount of token to (*_dstChainld*, *_toAddress*) from *_from* 

* ` from’ the owner of token 

* *_dstChainld* the destination chain identifier 

* ` toAddress* can be any size depending on the “dstChainld°. 

* ` amount the quantity of tokens in wei 

* ` refundAddress` the address LayerZero refunds if too much message fee is sent 

* ` zroPaymentAddress` set to address(0x0) if not paying in ZRO (LayerZero Token) 

* ` adapterParams is a flexible bytes array to indicate messaging adapter services 

*/ 

function sendFrom(address from, uint16 _dstChainld, bytes calldata _toAddress, uint 

_amount, address payable _refundAddress, address _zroPaymentAddress, bytes calldata 


_adapterParams) external payable; 


[** 
* @dev returns the circulating amount of tokens on current chain 
*/ 


function circulatingSupply() external view returns (uint); 


[** 

* @dev Emitted when `_amount` tokens are moved from the `_sender` to (`_dstChainld`, 
` toAddress`) 

* ` nonce’ is the outbound nonce 

*/ 

event SendToChain(address indexed _sender, uint16 indexed _dstChainld, bytes indexed 


_toAddress, uint amount, uint64 nonce); 


[** 
* @dev Emitted when ~_amount’ tokens are received from *_srcChainld’ into the 
` _toAddress` on the local chain. 
* ` nonce’ is the inbound nonce. 
*/ 
event ReceiveFromChain(uint16 indexed _srcChainld, bytes indexed _srcAddress, address 
indexed _toAddress, uint amount, uint64 _nonce); 


} 


eia E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\contracts-upgradable\token\OFT/IOF 
TUpgradeable.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.2; 


import "./IOFTCoreUpgradeable.sol"; 


import "@openzeppelin/contracts-upgradeable/token/ERC20/IERC20Upgradeable.sol"; 


[** 
* @dev Interface of the OFT standard 
| 


interface |OFTUpgradeable is IOFTCoreUpgradeable, IERC20Upgradeable { 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\contracts-upgradable\token\OFT/OF 
TCoreUpgradeable.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.2; 


import "./LOFTCoreUpgradeable.sol"; 
import "@openzeppelin/contracts-upgradeable/utils/introspection/ERC165Upgradeable.sol"; 


import "../../IzApp/NonblockingLzAppUpgradeable.sol"; 


abstract contract OFTCoreUpgradeable is Initializable, NonblockingLzAppUpgradeable, 
ERC165Upgradeable, |OFTCoreUpgradeable { 

uint public constant NO_EXTRA_GAS = 0; 

uint public constant FUNCTION_TYPE_SEND = 1; 


bool public useCustomAdapterParams; 


event SetUseCustomAdapterParams(bool useCustomAdapterParams); 


function _OFTCoreUpgradeable _init(address endpoint) internal onlylInitializing { 


__OFTCoreUpgradeable_init_unchained(_endpoint); 


function | OFTCoreUpgradeable init_unchained(address endpoint) internal 
onlylnitializing { 


__NonblockingLzAppUpgradeable_init_unchained(_endpoint); 


function supportsinterface(bytes4 _ interfaceld) public view virtual 
override(ERC165Upgradeable, IERC165Upgradeable) returns (bool) { 
return interfaceld == _ type(lOFTCoreUpgradeable).interfaceld || 
super.supportsInterface(interfaceld); 


} 


function estimateSendFee(uint16 _dstChainld, bytes memory _toAddress, uint _amount, 
bool _useZro, bytes memory _adapterParams) public view virtual override returns (uint 
nativeFee, uint zroFee) { 
// mock the payload for send() 
bytes memory payload = abi.encode(_toAddress, amount); 
return IzEndpoint.estimateFees(_dstChainld, address(this), payload, _useZro, 
_adapterParams); 


} 


function sendFrom(address from, uint16 _dstChainld, bytes memory _toAddress, uint 
_amount, address payable _refundAddress, address _zroPaymentAddress, bytes memory 
_adapterParams) public payable virtual override { 
_send(_ from, _dstChainld, toAddress, amount, refundAddress, zroPaymentAddress, 
_adapterParams); 


} 


function _nonblockingLzReceive(uintl6 _srcChainld, bytes memory _srcAddress, uint64 
_nonce, bytes memory _payload) internal virtual override { 


// decode and load the toAddress 


(bytes memory toAddressBytes, uint amount) = abi.decode(_payload, (bytes, uint)); 
address toAddress; 
assembly { 


toAddress := mload(add(toAddressBytes, 20)) 


_creditTo(_srcChainld, toAddress, amount); 


emit ReceiveFromChain(_srcChainld, srcAddress, toAddress, amount, _nonce); 


function _send(address from, uintl6 _dstChainld, bytes memory _toAddress, uint 
_amount, address payable _refundAddress, address _zroPaymentAddress, bytes memory 
_adapterParams) internal virtual { 


uint amount = _debitFrom(_from, dstChainld, toAddress, amount); 


bytes memory payload = abi.encode(_toAddress, amount); 
if (useCustomAdapterParams) { 
_checkGasLimit(_dstChainld, FUNCTION TYPE_SEND, _adapterParams, 
NO_EXTRA_GAS); 
} else { 
require(_adapterParams.length == 0, "LzApp: _adapterParams must be empty."); 


} 


_IzSend(_dstChainld, payload, refundAddress, zroPaymentAddress, adapterParams); 


uint64 nonce = |IzEndpoint.getOutboundNonce(_dstChainld, address(this)); 


emit SendToChain(_from, dstChainld, toAddress, amount, nonce); 


function setUseCustomAdapterParams(bool _useCustomAdapterParams) external 
onlyOwner { 
useCustomAdapterParams = _useCustomAdapterParams; 


emit SetUseCustomAdapterParams(_useCustomAdapterParams); 


function _debitFrom(address from, uint16 dstChainld, bytes memory _toAddress, uint 


_amount) internal virtual returns(uint); 


function creditTo(uint16 srcChainld, address toAddress, uint amount) internal virtual; 


[** 

* @dev This empty reserved space is put in place to allow future versions to add new 
* variables without shifting down storage in the inheritance chain. 

* See https://docs.openzeppelin.com/contracts/4.x/upgradeable#storage gaps 

*/ 


uint[50] private __gap; 


oa ae E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\contracts-upgradable\token\OFT/OF 
TUpgradeable.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.2; 


import "@openzeppelin/contracts-upgradeable/token/ERC20/ERC20Upgradeable.sol"; 
import "@openzeppelin/contracts-upgradeable/token/ERC20/IERC20Upgradeable.sol"; 
import "@openzeppelin/contracts-upgradeable/utils/introspection/IERC165Upgradeable.sol"; 
import "./OFTCoreUpgradeable.sol"; 


import "./lLOFTUpgradeable.sol"; 


// override decimal() function is needed 
contract OFTUpgradeable is Initializable, OFTCoreUpgradeable, ERC20Upgradeable, 
lOFTUpgradeable { 
function _ OFTUpgradeable _ init(string memory _name, string memory _symbol, address 
_IzEndpoint) internal onlylnitializing { 
__ERC20_init_unchained(_name, symbol); 


__OFTCoreUpgradeable_init_unchained(_lzEndpoint); 


function _— OFTUpgradeable _init_unchained(string memory _name, string memory 


_symbol, address _|zEndpoint) internal onlylnitializing {} 


function supportsinterface(bytes4  interfaceld) public view virtual 


override(OFTCoreUpgradeable, IERC165Upgradeable) returns (bool) { 


return interfaceld == type(lIOFTUpgradeable).interfaceld || interfaceld == 
type(IERC20Upgradeable).interfaceld || super.supportsInterface(interfaceld); 


} 


function circulatingSupply() public view virtual override returns (uint) { 


return totalSupply(); 


function debitFrom(address from, uint16, bytes memory, uint amount) internal virtual 
override returns(uint) { 
address spender = _msgSender(); 
if (_ from != spender) spendAllowance(_from, spender, amount); 
_burn(_from, _amount); 


return amount; 


function creditTo(uint16, address toAddress, uint amount) internal virtual override { 


_mint(_toAddress, _amount); 


[** 

* @dev This empty reserved space is put in place to allow future versions to add new 
* variables without shifting down storage in the inheritance chain. 

* See https://docs.openzeppelin.com/contracts/4.x/upgradeable#storage_gaps 

*/ 


uint[50] private __gap; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\contracts-upgradable\token\ONFT72 
1/IONFT721CoreUpgradeable.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.2; 


import "@openzeppelin/contracts-upgradeable/utils/introspection/ERC165Upgradeable.sol"; 


[** 
* @dev Interface of the ONFT Core standard 
*/ 
interface IONFT721CoreUpgradeable is IERC165Upgradeable { 
[** 
* @dev estimate send token `_tokenlid` to (`_dstChainlid`, `_toAddress`) 
* dstChainld - LO defined chain id to send tokens too 
* toAddress - dynamic bytes array which contains the address to whom you are sending 
tokens to on the dstChain 
* tokenld - token Id to transfer 
* useZro - indicates to use zro to pay LO fees 
* adapterParams - flexible bytes array to indicate messaging adapter services in LO 
*/ 
function estimateSendFee(uint16 _dstChainld, bytes calldata _toAddress, uint _tokenld, 
bool _useZro, bytes calldata _adapterParams) external view returns (uint nativeFee, uint 


zroFee); 


[** 


* @dev send token `_tokenlid` to (*_dstChainld*, `_toAddress`) from `_from` 
* ` toAddress can be any size depending on the “dstChainld°. 
* ` zroPaymentAddress` set to address(0x0) if not paying in ZRO (LayerZero Token) 
* ` adapterParams is a flexible bytes array to indicate messaging adapter services 
*/ 
function sendFrom(address from, uint16 _dstChainld, bytes calldata _toAddress, uint 
_tokenld, address payable _refundAddress, address _zroPaymentAddress, bytes calldata 


_adapterParams) external payable; 


[** 
* @dev Emitted when *_tokenld’ are moved from the ~_sender to (`_dstChainld`, 
` toAddress`) 
* ` nonce’ is the outbound nonce from 
ay 
event SendToChain(address indexed _sender, uint16 indexed _dstChainld, bytes indexed 


_toAddress, uint tokenld, uint64 nonce); 


[** 
* @dev Emitted when ~_tokenld* are sent from ~_srcChainld* to the `_toAddress` at this 
chain. `_nonce` is the inbound nonce. 
*/ 
event ReceiveFromChain(uint16 indexed _srcChainld, bytes indexed _srcAddress, address 
indexed _toAddress, uint tokenld, uint64 nonce); 


} 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\contracts-upgradable\token\ONFT 72 
1/IONFT721Upgradeable.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.2; 


import "@openzeppelin/contracts-upgradeable/token/ERC721/IERC721Upgradeable.sol"; 


import "./IONFT721CoreUpgradeable.sol"; 


[** 
* @dev Interface of the ONFT standard 
| 


interface IONFT721Upgradeable is IONFT721CoreUpgradeable, IERC721Upgradeable { 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\contracts-upgradable\token\ONFT72 
1/ONFT721CoreUpgradeable.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.2; 


import "@openzeppelin/contracts-upgradeable/utils/introspection/ERC165Upgradeable.sol"; 
import "@openzeppelin/contracts-upgradeable/utils/introspection/IERC165Upgradeable.sol"; 
import "../../IzApp/NonblockingLzAppUpgradeable.sol"; 


import "./LONFT721CoreUpgradeable.sol"; 


abstract contract ONFT721CoreUpgradeable is Initializable, NonblockingLzAppUpgradeable, 
ERC165Upgradeable, IONFT721CoreUpgradeable { 

uint public constant NO_EXTRA_GAS = 0; 

uint public constant FUNCTION_TYPE_SEND = 1; 


bool public useCustomAdapterParams; 


event SetUseCustomAdapterParams(bool _useCustomAdapterParams); 


function _ONFT721CoreUpgradeable init(address |zEndpoint) internal onlytnitializing { 


__ONFT721CoreUpgradeable_init_unchained(_|lzEndpoint); 


function — ONFT721CoreUpgradeable _init_unchained(address _|zEndpoint) internal 
onlyInitializing { 


__NonblockingLzAppUpgradeable_init_unchained(_IzEndpoint); 


function  supportsinterface(bytes4  interfaceld) public view virtual 
override(ERC165Upgradeable, IERC165Upgradeable) returns (bool) { 
return interfaceld == type(IONFT721CoreUpgradeable).interfaceld || 
super.supportsInterface(interfaceld); 


} 


function estimateSendFee(uintl6 _dstChainld, bytes memory _toAddress, uint _tokenld, 
bool _useZro, bytes memory _adapterParams) public view virtual override returns (uint 
nativeFee, uint zroFee) { 
// mock the payload for send() 
bytes memory payload = abi.encode(_toAddress, tokenld); 
return IzEndpoint.estimateFees(_dstChainld, address(this), payload, _useZro, 
_adapterParams); 


} 


function sendFrom(address from, uint16 _dstChainld, bytes memory _toAddress, uint 
_tokenld, address payable _refundAddress, address _zroPaymentAddress, bytes memory 
_adapterParams) public payable virtual override { 
_send(_ from, _dstChainld, toAddress, tokenld, refundAddress, zroPaymentAddress, 
_adapterParams); 


} 


function _send(address from, uintl6 _dstChainld, bytes memory _toAddress, uint 


_tokenld, address payable _refundAddress, address _zroPaymentAddress, bytes memory 


_adapterParams) internal virtual { 


_debitFrom(_from, _dstChainld, toAddress, tokenld); 


bytes memory payload = abi.encode(_toAddress, _tokenld); 
if (useCustomAdapterParams) { 
_checkGasLimit(_dstChainld, FUNCTION TYPE_SEND, _adapterParams, 
NO_EXTRA_GAS); 
} else { 
require(_adapterParams.length == 0, "LzApp: _adapterParams must be empty."); 
} 


_IzSend(_dstChainld, payload, refundAddress, zroPaymentAddress, adapterParams); 


uint64 nonce = |IzEndpoint.getOutboundNonce(_dstChainld, address(this)); 


emit SendToChain(_from, dstChainld, toAddress, tokenld, nonce); 


function _nonblockingLzReceive(uintl6 _srcChainld, bytes memory _srcAddress, uint64 
_nonce, bytes memory _payload) internal virtual override { 
// decode and load the toAddress 
(bytes memory toAddressBytes, uint tokenld) = abi.decode(_payload, (bytes, uint)); 
address toAddress; 
assembly { 


toAddress := mload(add(toAddressBytes, 20)) 


_creditTo(_srcChainld, toAddress, tokenld); 


emit ReceiveFromChain(_srcChainld, srcAddress, toAddress, tokenld, nonce); 


function setUseCustomAdapterParams(bool _useCustomAdapterParams) external 
onlyOwner { 
useCustomAdapterParams = _useCustomAdapterParams; 


emit SetUseCustomAdapterParams(_useCustomAdapterParams); 


function _debitFrom(address from, uint16 dstChainld, bytes memory _toAddress, uint 


_tokenld) internal virtual; 


function creditTo(uint16 srcChainld, address toAddress, uint tokenld) internal virtual; 


[** 

* @dev This empty reserved space is put in place to allow future versions to add new 
* variables without shifting down storage in the inheritance chain. 

* See https://docs.openzeppelin.com/contracts/4.x/upgradeable#storage gaps 

4 


uint[50] private _ gap; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\contracts-upgradable\token\ONFT72 
1/ONFT721Upgradeable.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.2; 


import "@openzeppelin/contracts/token/ERC721/ERC721.sol"; 

import "@openzeppelin/contracts-upgradeable/token/ERC721/ERC721Upgradeable.sol"; 
import "@openzeppelin/contracts-upgradeable/utils/introspection/IERC165Upgradeable.sol"; 
import "./ONFT721CoreUpgradeable.sol"; 


import "./IONFT721Upgradeable.sol"; 


// NOTE: this ONFT contract has no public minting logic. 
// must implement your own minting logic in child classes 
contract ONFT721Upgradeable is Initializable, ONFT721CoreUpgradeable, 
ERC721Upgradeable, IONFT721Upgradeable { 

function —_ ONFT721Upgradeable _init(string memory _name, string memory _symbol, 
address _|zEndpoint) internal onlylnitializing { 

__ERC721_init_unchained(_name, symbol); 


__ONFT721CoreUpgradeable_init_unchained(_IlzEndpoint); 


function — ONFT721Upgradeable _init_unchained(string memory _name, string memory 


_symbol, address _|IzEndpoint) internal onlytnitializing {} 


function supportsinterface(bytes4  interfaceld) public view virtual 


override(ONFT721CoreUpgradeable, ERC721Upgradeable, IERC165Upgradeable) returns 
(bool) { 

return interfaceld == type(IONFT721Upgradeable).interfaceld || 
super.supportsIinterface(interfaceld); 


} 


function debitFrom(address from, uint16, bytes memory, uint tokenld) internal virtual 
override { 
require(_isApprovedOrOwner(_msgSender(), _tokenld), "ONFT721: send caller is not 
owner nor approved"); 
require(ERC721Upgradeable.ownerOf(_tokenld) == from, "ONFT721: send from 
incorrect owner"); 


_transfer(_from, address(this), tokenld); 


function _creditTo(uint16, address toAddress, uint _tokenld) internal virtual override { 
require(! exists(_tokenld) || (_exists(_tokenld) && 
ERC721Upgradeable.ownerOf(_tokenld) == address(this))); 
if (!_exists(_tokenld)) { 
_safeMint(_toAddress, tokenld); 
} else { 


_transfer(address(this), toAddress, tokenld); 


[** 


* @dev This empty reserved space is put in place to allow future versions to add new 
* variables without shifting down storage in the inheritance chain. 

* See https://docs.openzeppelin.com/contracts/4.x/upgradeable#storage gaps 

*/ 


uint[50] private __gap; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\examples/ExampleBasedOFT20.sol-- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.0; 


import "../token/oft/extension/BasedOFT.sol"; 


/// @title A LayerZero OmnichainFungibleToken example of BasedOFT 
/// @notice Use this contract only on the BASE CHAIN. It locks tokens on source, on outgoing 
send(), and unlocks tokens when receiving from other chains. 
contract ExampleBasedOFT is BasedOFT { 

constructor(address layerZeroEndpoint, uint _initialSupply) BasedOFT("BasedOFT", 
"OFT", layerZeroEndpoint) { 


_mint(_msgSender(), _initialSupply); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\examples/ExampleComposableOFT. 
sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.0; 


import "../token/oft/composable/ComposableOFT.sol"; 


/// @title A LayerZero OmnichainFungibleToken example of BasedOFT 
/// @notice Use this contract only on the BASE CHAIN. It locks tokens on source, on outgoing 
send(), and unlocks tokens when receiving from other chains. 
contract ExampleComposableOFT is ComposableOFT { 

constructor(address _layerZeroEndpoint, uint _initialSupply) 
ComposableOFT("ExampleComposableOFT", "OFT", layerZeroEndpoint) { 


_mint(_msgSender(), _initialSupply); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\examples/ExampleComposableProx 


yOFT.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.0; 


import "../token/oft/composable/ComposableProxyOFT.sol"; 


contract ExampleComposableProxyOFT is ComposableProxyOFT { 


constructor(address _layerZeroEndpoint, address 


ComposableProxyOFT(_layerZeroEndpoint, proxyToken) {} 
} 


_proxyToken) 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\examples/ExampleOFT.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity “0.8.0; 


import "../token/oft/OFT.sol"; 


/// @title A LayerZero OmnichainFungibleToken example of BasedOFT 
/// @notice Use this contract only on the BASE CHAIN. It locks tokens on source, on outgoing 
send(), and unlocks tokens when receiving from other chains. 
contract ExampleOFT is OFT { 

constructor(address _layerZeroEndpoint) OFT("ExampleOFT", "OFT", _layerZeroEndpoint) 
{} 
} 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\examples/ExampleOFT20.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity “0.8.0; 


import "../token/oft/OFT.sol"; 


/// @title A LayerZero OmnichainFungibleToken example using OFT 

/// @notice Works in tandem with a BasedOFT. Use this to contract on for all NON-BASE 
chains. It burns tokens on send(), and mints on receive tokens form other chains. 

contract ExampleOFT is OFT { 


constructor(address _layerZeroEndpoint) OFT("OFT", "OFT", layerZeroEndpoint) {} 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\examples/ExampleOFTV2.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity “0.8.0; 


import "../token/oft/v2/OFTV2.sol"; 


/// @title A LayerZero OmnichainFungibleToken example of BasedOFT 
/// @notice Use this contract only on the BASE CHAIN. It locks tokens on source, on outgoing 
send(), and unlocks tokens when receiving from other chains. 
contract ExampleOFTV2 is OFTV2 { 

constructor(address _layerZeroEndpoint, uint _initialSupply, uint8 _sharedDecimals) 
OFTV2("ExampleOFT", "OFT", sharedDecimals, layerZeroEndpoint) { 


_mint(_msgSender(), _initialSupply); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\examples/ExampleUniversalONFT72 
1.sol---- 


// SPDX-License-Identifier: BUSL-1.1 


pragma solidity *0.8.0; 
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import "../token/onft/extension/UniversalONFT721.sol"; 


/// @title A LayerZero UniversalONFT example 

/// @notice You can use this to mint ONFT and send nftlds across chain. 

/// Each contract deployed to a chain should carefully set a ~_startMintIndex* and a 
` maxMint` 


/// value to set a range of allowed mintable nftids (so that no two chains can mint the same 


id!) 
contract ExampleUniversalONFT721 is UniversalONFT721 { 

constructor(uint256 _minGasToStore, address layerZeroEndpoint, uint _startMintld, uint 
_endMintld) UniversalONFT721("ExampleUniversalONFT721", "ONFT721", _minGasToStore, 
_layerZeroEndpoint, startMintld, endMintld) {} 


} 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\examples/OmniCounter.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity “0.8.0; 


pragma abicoder v2; 


import "../IzApp/NonblockingLzApp.sol"; 


/// @title A LayerZero example sending a cross chain message from a source chain to a 
destination chain to increment a counter 
contract OmniCounter is NonblockingLzApp { 

bytes public constant PAYLOAD = "\x01\x02\x03\x04"; 


uint public counter; 


constructor(address _|lzEndpoint) NonblockingLzApp(_IzEndpoint) {} 


function _nonblockingLzReceive(uint16, bytes memory, uint64, bytes memory) internal 
override { 


counter += 1; 


function estimateFee(uintl6 dstChainld, bool useZro, bytes calldata _adapterParams) 
public view returns (uint nativeFee, uint zroFee) { 
return IzEndpoint.estimateFees(_dstChainld, address(this), PAYLOAD, _useZro, 
_adapterParams); 


} 


function incrementCounter(uintl6 _dstChainld) public payable { 
_IzSend(_dstChainld, PAYLOAD, payable(msg.sender), address(0x0), bytes(""), 
msg.value); 


} 


function setOracle(uint16 dstChainld, address oracle) external onlyOwner { 
uint TYPE_ORACLE = 6; 
// set the Oracle 
IzEndpoint.setConfig(IzEndpoint.getSendVersion(address(this)), dstChainld, 
TYPE_ORACLE, abi.encode(oracle)); 


} 


function getOracle(uint16 remoteChainld) external view returns (address oracle) { 
bytes memory bytesOracle = 
IzEndpoint.getConfig(IzEndpoint.getSendVersion(address(this)), remoteChainld, 
address(this), 6); 
assembly { 


_oracle := mload(add(bytesOracle, 32)) 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\examples/PingPong.sol---- 


// SPDX-License-Identifier: MIT 


II 

// Note: you will need to fund each deployed contract with gas 

if 

// PingPong sends a LayerZero message back and forth between chains 
// until it is paused or runs out of gas! 

II 

// Demonstrates: 

// 1. a recursive feature of calling send() from inside IzReceive() 

// 2. how to `estimateFees` for a send()'ing a LayerZero message 


// 3. the contract pays the message fee 


pragma solidity *0.8.0; 


pragma abicoder v2; 


import "@openzeppelin/contracts/security/Pausable.sol"; 


import "../IzApp/NonblockingLzApp.sol"; 


contract PingPong is NonblockingLzApp, Pausable { 
// event emitted every ping() to keep track of consecutive pings count 


event Ping(uint pings); 


// constructor requires the LayerZero endpoint for this chain 


constructor(address endpoint) NonblockingLzApp(_endpoint) {} 


// disable ping-ponging 
function enable(bool en) external { 
if (en) { 
_pause(); 
} else { 


_unpause(); 


// pings the destination chain, along with the current number of pings sent 
function ping( 
uint16 _dstChainld, // send a ping to this destination chainld 
address, // destination address of PingPong contract 
uint pings // the number of pings 
) public payable whenNotPaused { 
require(address(this).balance > 0, "the balance of this contract is 0. pls send gas for 


message fees"); 


emit Ping(++pings); 


// encode the payload with the number of pings 


bytes memory payload = abi.encode(pings); 


// use adapterParams v1 to specify more gas for the destination 


uint16 version = 1; 


uint gasForDestinationLzReceive = 350000; 
bytes memory adapterParams = _— abi.encodePacked(version, 


gasForDestinationLzReceive); 


// send LayerZero message 
_IzSend( // {value: messageFee} will be paid out of this contract! 
_dstChainld, // destination chainld 
payload, // abi.encode()'ed bytes 
payable(this), // (msg.sender will be this contract) refund address (LayerZero will 
refund any extra gas back to caller of send() 
address(0x0), // future param, unused for this example 
adapterParams, // v1 adapterParams, specify custom destination gas qty 


msg.value 


function _nonblockingLzReceive( 
uint16 _srcChainld, 
bytes memory _srcAddress, 
uint64, /*_nonce*/ 
bytes memory _payload 
) internal override { 
// use assembly to extract the address from the bytes memory parameter 
address sendBackToAddress; 
assembly { 


sendBackToAddress := mload(add(_srcAddress, 20)) 


// decode the number of pings sent thus far 


uint pings = abi.decode(_payload, (uint)); 


// *pong* back to the other side 


ping(_srcChainld, sendBackToAddress, pings); 


// allow this contract to receive ether 


receive() external payable {} 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\interfaces/ILayerZeroEndpoint.sol--- 


// SPDX-License-Identifier: MIT 


pragma solidity >=0.5.0; 


import "./ILayerZeroUserApplicationConfig.sol"; 


interface ILayerZeroEndpoint is ILayerZeroUserApplicationConfig { 
// @notice send a LayerZero message to the specified address at a LayerZero endpoint. 
// @param _dstChainld - the destination chain identifier 
// @param _destination - the address on destination chain (in bytes). address 
length/format may vary by chains 
// @param _payload - a custom bytes payload to send to the destination contract 
// @param _refundAdadress - if the source transaction is cheaper than the amount of value 
passed, refund the additional amount to this address 
// @param _zroPaymentAddress - the address of the ZRO token holder who would pay for 
the transaction 
// @param _adapterParams - parameters for custom functionality. e.g. receive airdropped 
native gas from the relayer on destination 
function send(uintl6 _dstChainld, bytes calldata destination, bytes calldata payload, 
address payable _refundAddress, address —_zroPaymentAddress, bytes calldata 


_adapterParams) external payable; 


// @notice used by the messaging library to publish verified payload 


// @param _srcChainld - the source chain identifier 


// @param _srcAddress - the source contract (as bytes) at the source chain 
// @param _dstAddress - the address on destination chain 
// @param _nonce - the unbound message ordering nonce 
// @param _gasLimit - the gas limit for external contract execution 
// @param _payload - verified payload to send to the destination contract 
function receivePayload(uintl6 —_srcChainld, bytes calldata _srcAddress, address 


_dstAddress, uint64 nonce, uint gasLimit, bytes calldata_ payload) external; 


// @notice get the inboundNonce of a IzApp from a source chain which could be EVM or 
non-EVM chain 

// @param _srcChainld - the source chain identifier 

// @param _srcAddress - the source chain contract address 

function getInboundNonce(uint16 _srcChainld, bytes calldata srcAddress) external view 


returns (uint64); 


// @notice get the outboundNonce from this source chain which, consequently, is always 
an EVM 
// @param _srcAddress - the source chain contract address 
function getOutboundNonce(uint16 _dstChainld, address _srcAddress) external view 


returns (uint64); 


// @notice gets a quote in source native gas, for the amount that send() requires to pay 
for message delivery 

// @param _dstChainld - the destination chain identifier 

// @param _userApplication - the user app address on this EVM chain 


// @param _payload - the custom message to send over LayerZero 


// @param _payInZRO - if false, user app pays the protocol fee in native token 
// @param _adapterParam - parameters for the adapter service, e.g. send some dust 
native token to dstChain 
function estimateFees(uintl16 _dstChainld, address _userApplication, bytes calldata 
_payload, bool _paylnZRO, bytes calldata _adapterParam) external view returns (uint 


nativeFee, uint zroFee); 


// @notice get this Endpoint's immutable source identifier 


function getChainld() external view returns (uint16); 


// @notice the interface to retry failed message on this Endpoint destination 
// @param _srcChainld - the source chain identifier 
// @param _srcAddress - the source chain contract address 
// @param _payload - the payload to be retried 
function retryPayload(uintl6 _srcChainld, bytes calldata _srcAddress, bytes calldata 


_payload) external; 


// @notice query if any STORED payload (message blocking) at the endpoint. 

// @param _srcChainld - the source chain identifier 

// @param _srcAddress - the source chain contract address 

function hasStoredPayload(uint16 srcChainld, bytes calldata srcAddress) external view 


returns (bool); 


// @notice query if the _libraryAddress is valid for sending msgs. 
// @param _userApplication - the user app address on this EVM chain 


function getSendLibraryAddress(address _userApplication) external view returns 


(address); 


// @notice query if the _libraryAddress is valid for receiving msgs. 
// @param _userApplication - the user app address on this EVM chain 
function getReceiveLibraryAddress(address _userApplication) external view returns 


(address); 


// @notice query if the non-reentrancy guard for send() is on 
// @return true if the guard is on. false otherwise 


function isSendingPayload() external view returns (bool); 


// @notice query if the non-reentrancy guard for receive() is on 
// @return true if the guard is on. false otherwise 


function isReceivingPayload() external view returns (bool); 


// @notice get the configuration of the LayerZero messaging library of the specified 
version 
// @param _version - messaging library version 
// @param _chainld - the chainld for the pending config change 
// @param _userApplication - the contract address of the user application 
// @param _configType - type of configuration. every messaging library has its own 
convention. 
function getConfig(uintl6 _version, uintl6 _chainld, address _userApplication, uint 


_configType) external view returns (bytes memory); 


// @notice get the send() LayerZero messaging library version 


// @param _userApplication - the contract address of the user application 


function getSendVersion(address _userApplication) external view returns (uint16); 


// @notice get the IzReceive() LayerZero messaging library version 
// @param _userApplication - the contract address of the user application 


function getReceiveVersion(address _userApplication) external view returns (uint16); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\interfaces/ILayerZeroReceiver.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity >=0.5.0; 


interface ILayerZeroReceiver { 
// @notice LayerZero endpoint will invoke this function to deliver the message on the 
destination 
// @param _srcChainld - the source endpoint identifier 
// @param _srcAddress - the source sending contract address from the source chain 
// @param _nonce - the ordered message nonce 
// @param _payload - the signed payload is the UA bytes has encoded to be sent 
function IzReceive(uintl6 srcChainld, bytes calldata _srcAddress, uint64 nonce, bytes 
calldata payload) external; 


} 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\interfaces/ILayerZeroUserApplicatio 
nConfig.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity >=0.5.0; 


interface ILayerZeroUserApplicationConfig { 
// @notice set the configuration of the LayerZero messaging library of the specified 
version 
// @param _version - messaging library version 
// @param _chainld - the chainld for the pending config change 
// @param _configType - type of configuration. every messaging library has its own 
convention. 
// @param _config - configuration in the bytes. can encode arbitrary content. 
function setConfig(uintl6 version, uintl6 _chainld, uint _configType, bytes calldata 


_config) external; 


// @notice set the send() LayerZero messaging library version to version 
// @param _version - new messaging library version 


function setSendVersion(uintl6 version) external; 


// @notice set the IzReceive() LayerZero messaging library version to version 


// @param _version - new messaging library version 


function setReceiveVersion(uint16 version) external; 


// @notice Only when the UA needs to resume the message flow in blocking mode and 


clear the stored payload 
// @param _srcChainld - the chainld of the source chain 
// @param _srcAddress - the contract address of the source contract at the source chain 


function forceResumeReceive(uintl6 _srcChainld, bytes calldata _srcAddress) external; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\interfaces/IStargateFactory.sol---- 
// SPDX-License-Identifier: BUSL-1.1 


pragma solidity “0.8.4; 


import "./IStargatePool.sol"; 


interface IStargateFactory { 


function getPool(uint256 srcPoolld) external returns (IStargatePool); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\interfaces/IStargatePool.sol---- 
// SPDX-License-Identifier: BUSL-1.1 


pragma solidity *0.8.4; 


interface IStargatePool { 


function token() external returns (address); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\interfaces/IStargateReceiver.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity “0.8.4; 


interface IStargateReceiver { 
function sgReceive( 
uintl6 _chainld, 
bytes memory _srcAddress, 
uint256 nonce, 
address token, 
uint256 amountLD, 
bytes memory payload 


) external; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\interfaces/IStargateRouter.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity “0.8.4; 


pragma abicoder v2; 


interface IStargateRouter { 
struct IzTxObj { 
uint256 dstGasForCall; 
uint256 dstNativeAmount; 


bytes dstNativeAddr; 


function addLiquidity( 
uint256 _poolld, 
uint256 amountLD, 
address to 


) external; 


function swap( 
uintl6 _dstChainld, 
uint256 srcPoolld, 
uint256 _dstPoolld, 
address payable refundAddress, 
uint256 amountLD, 


uint256 minAmountLD, 


IZTxObj memory _|lzTxParams, 
bytes calldata to, 
bytes calldata payload 


) external payable; 


function redeemRemote( 
uintl6 _dstChainld, 
uint256 srcPoolld, 
uint256 _dstPoolld, 
address payable _refundAddress, 
uint256 _amountLP, 
uint256 minAmountLD, 
bytes calldata to, 
IZTxObj memory _lzTxParams 


) external payable; 


function instantRedeemLocal( 
uint16 _srcPoolld, 
uint256 _amountLP, 
address to 


) external returns (uint256); 


function redeemLocal( 
uint16 _dstChainld, 
uint256 srcPoolld, 


uint256 _dstPoolld, 


address payable _refundAddress, 
uint256 amountLP, 

bytes calldata to, 

IZTxObj memory _lzTxParams 


) external payable; 


function sendCredits( 
uintl6 _dstChainld, 
uint256 srcPoolld, 
uint256 _dstPoolld, 
address payable _refundAddress 


) external payable; 


function quoteLayerZeroFee( 
uint16 _dstChainld, 
uint8 functionType, 
bytes calldata toAddress, 
bytes calldata _transferAndCallPayload, 
IZTxObj memory _lzTxParams 


) external view returns (uint256, uint256); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\interfaces/IStargateRouterETH.sol--- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.4; 


pragma abicoder v2; 


interface IStargateRouterETH { 


function addLiquidityETH() external payable; 


function swapETH( 
uint16 dstChainld, 
address payable refundAddress, 
bytes calldata to, 
uint256 amountLD, 
uint256 minAmountLD 


) external payable; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\interfaces/IStargateWidget.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.4; 


pragma abicoder v2; 


import "../interfaces/IStargateRouter.sol"; 


interface IStargateWidget { 
struct FeeObj { 
uint256 tenthBps; // bps is to an extra decimal place 


address feeCollector; 


event WidgetSwapped(bytes2 indexed partnerld, uint256 tenthBps, uint256 widgetFee); 


event PartnerSwap(bytes2 indexed partnerld); 


function partnerSwap(bytes2 _partnerld) external; 


function swapTokens( 
uintl6 _dstChainld, 
uint16 _srcPoolld, 
uint16 _dstPoolld, 
uint256 _amountLD, 
uint256 minAmountLD, 


IStargateRouter.IzZTxObj calldata_IzTxParams, 


bytes calldata to, 
bytes2 _partnerld, 
FeeObj calldata feeObj 


) external payable; 


function swapETH( 
uintl6 _dstChainld, 
uint256 _amountLD, 
uint256 minAmountLD, 
bytes calldata to, 
bytes2 _partnerld, 
FeeObj calldata feeObj 


) external payable; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\libraries/LZLib.sol---- 


// SPDX-License-Identifier: BUSL-1.1 


pragma solidity >=0.6.0; 


pragma experimental ABIEncodervV2; 


library LzLib { 
// LayerZero communication 
struct CallParams { 
address payable refundAddress; 


address zroPaymentAddress; 


// Address type handling 


struct AirdropParams { 
uint airdropAmount; 


bytes32 airdropAddress; 


function buildAdapterParams(LzLib.AirdropParams memory _airdropParams, uint 
_uaGasLimit) internal pure returns (bytes memory adapterParams) { 
if (_airdropParams.airdropAmount == 0 && _airdropParams.airdropAddress == 
bytes32(0x0)) { 


adapterParams = buildDefaultAdapterParams(_uaGasLimit); 


} else { 


adapterParams = buildAirdropAdapterParams(_uaGasLimit, _airdropParams); 


// Build Adapter Params 

function buildDefaultAdapterParams(uint uaGas) internal pure returns (bytes memory) { 
// txType 1 
// bytes [2 32 ] 
// fields [txType extraGas] 


return abi.encodePacked(uint16(1), uaGas); 


function buildAirdropAdapterParams(uint _uaGas, AirdropParams memory _params) 
internal pure returns (bytes memory) { 
require(_params.airdropAmount > 0, "Airdrop amount must be greater than 0"); 


require(_params.airdropAddress != bytes32(0x0), "Airdrop address must be set"); 


// txType 2 
// bytes [2 32 32 bytes[] ] 
// fields [txType extraGas dstNativeAmt dstNativeAddress] 
return abi.encodePacked(uint16(2), _uaGas, _params.airdropAmount, 
_params.airdropAddress); 


} 


function getGasLimit(bytes memory _adapterParams) internal pure returns (uint gasLimit) 


require(_adapterParams.length == 34 || _adapterParams.length > 66, "Invalid 
adapterParams"); 
assembly { 


gasLimit := mload(add(_adapterParams, 34)) 


// Decode Adapter Params 
function decodeAdapterParams(bytes memory _adapterParams) internal pure returns 
(uint16 txType, uint uaGas, uint airdropAmount, address payable airdropAddress) { 
require(_adapterParams.length == 34 || _adapterParams.length > 66, "Invalid 
adapterParams"); 
assembly { 
txType := mload(add(_adapterParams, 2)) 
uaGas := mload(add(_adapterParams, 34)) 
} 
require(txType == 1 || txType == 2, "Unsupported txType"); 


require(uaGas > 0, "Gas too low"); 


if (txType == 2) { 
assembly { 
airdropAmount := mload(add(_adapterParams, 66)) 


airdropAddress := mload(add(_adapterParams, 86)) 


// Address type handling 
function bytes32ToAddress(bytes32 _bytes32Address) internal pure returns (address 
_address) { 


return address(uint160(uint(_bytes32Address))); 


function addressToBytes32(address _address) internal pure returns (bytes32 
_bytes32Address) { 


return bytes32(uint(uint160(_address))); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\IzApp/LZApp.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.0; 


import "@openzeppelin/contracts/access/Ownable.sol"; 
import "../interfaces/ILayerZeroReceiver.sol"; 

import "../interfaces/ILayerZeroUserApplicationConfig.sol"; 
import "../interfaces/ILayerZeroEndpoint.sol"; 


import "../util/BytesLib.sol"; 


[* 

* a generic LzReceiver implementation 

i 

abstract contract LzApp is Ownable, ILayerZeroReceiver, ILayerZeroUserApplicationConfig { 


using BytesLib for bytes; 


// ua can not send payload larger than this by default, but it can be changed by the ua 
owner 


uint constant public DEFAULT _PAYLOAD_SIZE_ LIMIT = 10000; 


ILayerZeroEndpoint public immutable IzEndpoint; 

mapping(uintl6 => bytes) public trustedRemoteLookup; 
mapping(uintl6 => mapping(uintl6 => uint)) public minDstGasLookup; 
mapping(uintl16 => uint) public payloadSizeLimitLookup; 


address public precrime; 


event SetPrecrime(address precrime); 
event SetTrustedRemote(uint16 remoteChainld, bytes _path); 
event SetTrustedRemoteAddress(uintl6 remoteChainld, bytes remoteAddress); 


event SetMinDstGas(uintl6 dstChainld, uint16 type, uint _minDstGas); 


constructor(address endpoint) { 


IzEndpoint = ILayerZeroEndpoint(_endpoint); 


function IzReceive(uintl6 srcChainld, bytes calldata _srcAddress, uint64 nonce, bytes 
calldata_ payload) public virtual override { 
// IzReceive must be called by the endpoint for security 


require(_msgSender() == address(IzEndpoint), "LzApp: invalid endpoint caller"); 


bytes memory trustedRemote = trustedRemoteLookup[_srcChainld]; 
// if will still block the message pathway from (srcChainld, srcAddress). should not 
receive message from untrusted remote. 
require(_srcAddress.length == trustedRemote.length && trustedRemote.length > 0 && 
keccak256(_srcAddress) == keccak256(trustedRemote), "LzApp: invalid source sending 


contract"); 


_blockingLzReceive(_srcChainld, srcAddress, nonce, payload); 


// abstract function - the default behaviour of LayerZero is blocking. See: 


NonblockingLzApp if you dont need to enforce ordered messaging 
function _blockingLzReceive(uintl16 —srcChainld, bytes memory _srcAddress, uint64 


_nonce, bytes memory _payload) internal virtual; 


function _IzSend(uintl6 —_dstChainld, bytes memory _payload, address payable 
_refundAddress, address _zroPaymentAddress, bytes memory _adapterParams, uint 
_nativeFee) internal virtual { 
bytes memory trustedRemote = trustedRemoteLookup[_dstChainld]; 
require(trustedRemote.length != 0, "LzApp: destination chain is not a trusted source"); 
_checkPayloadSize(_dstChainld, payload.length); 
IzEndpoint.send{value: _nativeFee}(_dstChainld, trustedRemote, _payload, 
_refundAddress, _zroPaymentAddress, adapterParams); 


} 


function  _checkGasLimit(uintl6 —dstChainld, uintl6 type, bytes memory 
_adapterParams, uint _extraGas) internal view virtual { 
uint providedGasLimit = _getGasLimit(_adapterParams); 
uint minGasLimit = minDstGasLookup[_dstChainld][_type] + _extraGas; 
require(minGasLimit > 0, "LzApp: minGasLimit not set"); 


require(providedGasLimit >= minGasLimit, "LZApp: gas limit is too low"); 


function _getGasLimit(bytes memory _adapterParams) internal pure virtual returns (uint 
gasLimit) { 
require(_adapterParams.length >= 34, "LzApp: invalid adapterParams"); 


assembly { 


gasLimit := mload(add(_adapterParams, 34)) 


function checkPayloadSize(uint16 dstChainld, uint payloadSize) internal view virtual { 
uint payloadSizeLimit = payloadSizeLimitLookup[_dstChainld]; 
if (payloadSizeLimit == 0) { // use default if not set 
payloadSizeLimit = DEFAULT PAYLOAD SIZE _ LIMIT; 
} 


require(_payloadSize <= payloadSizeLimit, "LzApp: payload size is too large"); 


function getConfig(uint16 version, uintl6 _chainld, address, uint _configType) external 
view returns (bytes memory) { 


return IzEndpoint.getConfig(_version, chainld, address(this), configType); 


// generic config for LayerZero user Application 
function setConfig(uintl6 version, uintl6 _chainld, uint _configType, bytes calldata 
_config) external override onlyOwner { 


IzEndpoint.setConfig(_version, chainld, configType, _config); 


function setSendVersion(uint16 version) external override onlyOwner { 


IzEndpoint.setSendVersion(_version); 


function setReceiveVersion(uint16 version) external override onlyOwner { 


IzEndpoint.setReceiveVersion(_version); 


function forceResumeReceive(uintl6 _srcChainld, bytes calldata _srcAddress) external 
override onlyOwner { 


IzEndpoint.forceResumeReceive(_srcChainld, _srcAddress); 


// path = abi.encodePacked(remoteAddress, localAddress) 
// this function set the trusted path for the cross-chain communication 


function setTrustedRemote(uintl6 srcChainld, bytes calldata path) external onlyOwner 


trustedRemoteLookup[_srcChainld] = _path; 


emit SetTrustedRemote(_srcChainld, path); 


function setTrustedRemoteAddress(uintl6 _remoteChainld, bytes calldata 
_remoteAddress) external onlyOwner { 
trustedRemoteLookup[_remoteChainld] = abi.encodePacked(_remoteAddress, 
address(this)); 


emit SetTrustedRemoteAddress(_remoteChainld, remoteAddress); 


function getTrustedRemoteAddress(uint16 _remoteChainld) external view returns (bytes 
memory) { 
bytes memory path = trustedRemoteLookup[_remoteChainld]; 
require(path.length != 0, "LzApp: no trusted path record"); 


return path.slice(O, path.length - 20); // the last 20 bytes should be address(this) 


function setPrecrime(address _precrime) external onlyOwner { 
precrime = _precrime; 


emit SetPrecrime(_precrime); 


function setMinDstGas(uint16 _dstChainld, uintl6 _packetType, uint _minGas) external 
onlyOwner { 
require(_minGas > 0, "LzApp: invalid minGas"); 
minDstGasLookup[_dstChainld][_packetType] = _minGas; 


emit SetMinDstGas(_dstChainld, packetType, _minGas); 


// if the size is 0, it means default size limit 
function setPayloadSizeLimit(uint16 dstChainld, uint size) external onlyOwner { 


payloadSizeLimitLookup[_dstChainld] = _ size; 


function isTrustedRemote(uint16 _srcChainld, bytes calldata _srcAddress) external view 


returns (bool) { 
bytes memory trustedSource = trustedRemoteLookup[_srcChainld]; 


return keccak256(trustedSource) == keccak256(_srcAddress); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\IzZApp/NonblockingLzApp.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.0; 


import "./LzApp.sol"; 


import "../util/ExcessivelySafeCall.sol"; 


[* 

* the default LayerZero messaging behaviour is blocking, i.e. any failed message will block 
the channel 

* this abstract class try-catch all fail messages and store locally for future retry. hence, 
non-blocking 

* NOTE: if the srcAddress is not configured properly, it will still block the message pathway 
from (srcChainld, srcAddress) 

*/ 

abstract contract NonblockingLzApp is LZApp { 


using ExcessivelySafeCall for address; 


constructor(address _endpoint) LzApp(_endpoint) {} 


mapping(uint16 => mapping(bytes => mapping(uint64 => bytes32))) public 


failedMessages; 


event MessageFailed(uintl6 _srcChainld, bytes _srcAddress, uint64 _nonce, bytes 


_payload, bytes _reason); 


event RetryMessageSuccess(uintl16 —_srcChainld, bytes _srcAddress, uint64 _nonce, 


bytes32 payloadHash); 


// overriding the virtual function in LzReceiver 

function _blockingLzReceive(uint16 —srcChainld, bytes memory _srcAddress, uint64 

_nonce, bytes memory _payload) internal virtual override { 
(bool success, bytes memory reason) = address(this).excessivelySafeCall(gasleft(), 

150, abi.encodeWithSelector(this.nonblockingLzReceive.selector, _srcChainld, _srcAddress, 
_nonce, _payload)); 

// try-catch all errors/exceptions 

if (!lsuccess) { 


_storeFailedMessage(_srcChainld, srcAddress, nonce, payload, reason); 


function _storeFailedMessage(uintl16 _srcChainld, bytes memory _srcAddress, uint64 
_nonce, bytes memory _payload, bytes memory _reason) internal virtual { 
failedMessages[_srcChainld][_srcAddress][_nonce] = keccak256(_payload); 


emit MessageFailed(_srcChainld, srcAddress, nonce, payload, reason); 


function nonblockingLzReceive(uintl6 _srcChainld, bytes calldata _srcAddress, uint64 
_nonce, bytes calldata payload) public virtual { 

// only internal transaction 

require(_msgSender() == address(this), "NonblockingLzApp: caller must be LzApp"); 


_nonblockingLzReceive(_srcChainld, srcAddress, nonce, payload); 


//@notice override this function 
function _nonblockingLzReceive(uintl16 _srcChainld, bytes memory _srcAddress, uint64 


_nonce, bytes memory _payload) internal virtual; 


function retryMessage(uint16 srcChainld, bytes calldata _srcAddress, uint64 _nonce, 
bytes calldata payload) public payable virtual { 

// assert there is message to retry 

bytes32 payloadHash = failedMessages[_srcChainld][_srcAddress][_nonce]; 

require(payloadHash != bytes32(0), "NonblockingLzApp: no stored message"); 

require(keccak256(_payload) == payloadHash, "NonblockingLzApp: invalid payload"); 

// clear the stored message 

failedMessages[_srcChainld][_srcAddress][_nonce] = bytes32(0); 

// execute the message. revert if it fails again 

_nonblockingLzReceive(_srcChainld, srcAddress, nonce, payload); 


emit RetryMessageSuccess(_srcChainld, srcAddress, nonce, payloadHash); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\mocks/ERC1155Mock.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity “0.8.0; 


import "@openzeppelin/contracts/token/ERC1155/ERC1155.sol"; 


// for mock purposes only, no limit on minting functionality 


contract ERC1155Mock is ERC1155 { 


constructor(string memory uri_) ERC1155(uri_) {} 


function mint(address to, uint tokenld, uint amount) public { 


_mint(_to, tokenld, amount, ""); 


function mintBatch(address to, uint[] memory _tokenlds, uint[] memory _amounts) public 


_mintBatch(_to, tokenlds, amounts, ""); 


function transfer(address to, uint tokenld, uint amount) public { 


_safeTransferFrom(msg.sender, to, tokenld, amount, ""); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\mocks/ERC20Mock.sol---- 
// SPDX-License-Identifier: MIT 


pragma solidity *0.8.0; 


import "@openzeppelin/contracts/token/ERC20/ERC20.sol"; 


// this is a MOCK 
contract ERC20Mock is ERC20 { 


constructor(string memory name_, string memory symbol_) ERC20(name_, symbol_) {} 


function mint(address to, uint amount) public { 


_mint(_to, _amount); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\mocks/ERC721Mock.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity “0.8.0; 


import "@openzeppelin/contracts/token/ERC721/ERC721.sol"; 


// for mock purposes only, no limit on minting functionality 


contract ERC721Mock is ERC721 { 


constructor(string memory _name, string memory symbol) ERC721(_name, symbol) {} 


string public baseTokenURI; 


function mint(address to, uint tokenld) public { 


_safeMint(to, tokenld, ""); 


function transfer(address to, uint tokenld) public { 


_safeTransfer(msg.sender, to, tokenld, ""); 


function isApprovedOrOwner(address spender, uint tokenld) public view virtual returns 
(bool) { 


return isApprovedOrOwner(spender, tokenld); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\mocks/LZEndpointMock.sol---- 


// SPDX-License-Identifier: BUSL-1.1 


pragma solidity “0.8.0; 


pragma abicoder v2; 


import "../interfaces/ILayerZeroReceiver.sol"; 
import "../interfaces/ILayerZeroEndpoint.sol"; 


import "../libraries/LZLib.sol"; 


/* 

like a real LayerZero endpoint but can be mocked, which handle message transmission, 
verification, and receipt. 

- blocking: LayerZero provides ordered delivery of messages from a given sender to a 
destination chain. 

- non-reentrancy: endpoint has a non-reentrancy guard for both the send() and receive(), 
respectively. 

- adapter parameters: allows UAs to add arbitrary transaction params in the send() function, 
like airdrop on destination chain. 

unlike a real LayerZero endpoint, it is 

- no messaging library versioning 

- send() will short circuit to IzZReceive() 

- no user application configuration 

*/ 

contract LZEndpointMock is ILayerZeroEndpoint { 


uint8 internal constant NOT_ENTERED = 1; 


uint8 internal constant ENTERED = 2; 


mapping(address => address) public IzEndpointLookup; 


uintl6 public mockChainld; 


bool public nextMsgBlocked; 


// fee config 

RelayerFeeConfig public relayerFeeConfig; 
ProtocolFeeConfig public protocolFeeConfig; 
uint public oracleFee; 


bytes public defaultAdapterParams; 


// path = remote addrss + local address 

// inboundNonce = [srcChainld][path]. 

mapping(uintl6 => mapping(bytes => uint64)) public inboundNonce; 
//todo: this is a hack 

// outboundNonce = [dstChainld][srcAddress] 

mapping(uintl6 => mapping(address => uint64)) public outboundNonce; 
//_ I| outboundNonce = [dstChainld][path]. 

[| mapping(uintl6 => mapping(bytes => uint64)) public outboundNonce; 
// storedPayload = [srcChainld][path] 

mapping(uintl6 => mapping(bytes => StoredPayload)) public storedPayload; 
// msgToDeliver = [srcChainld][path] 


mapping(uintl6 => mapping(bytes => QueuedPayload[])) public msgsToDeliver; 


// reentrancy guard 
uint8 internal send_entered_state = 1; 


uint8 internal receive_entered_state = 1; 


struct ProtocolFeeConfig { 
uint zroFee; 


uint nativeBP; 


struct RelayerFeeConfig { 
uint128 dstPriceRatio; // 10*10 
uint128 dstGasPricelnWei; 
uint128 dstNativeAmtCap; 
uint64 baseGas; 


uint64 gasPerByte; 


struct StoredPayload { 
uint64 payloadLength; 
address dstAddress; 


bytes32 payloadHash; 


struct QueuedPayload { 
address dstAddress; 


uint64 nonce; 


bytes payload; 


modifier sendNonReentrant() { 
require(_send_entered_ state == NOT ENTERED, "“LayerZeroMock: no send 
reentrancy"); 


_send_entered_state = ENTERED; 


r 


_send_entered_state = NOT ENTERED; 


modifier receiveNonReentrant() { 
require(_receive_entered_state == _NOT_ENTERED, "LayerZeroMock: no receive 
reentrancy"); 


_receive_entered state = ENTERED; 


r 


_receive_entered_state = NOT ENTERED; 


event UaForceResumeReceive(uint16 chainld, bytes srcAddress); 
event PayloadCleared(uint16 srcChainld, bytes srcAddress, uint64 nonce, address 
dstAddress); 
event PayloadStored(uintl6 srcChainld, bytes srcAddress, address dstAddress, uint64 
nonce, bytes payload, bytes reason); 


event ValueTransferFailed(address indexed to, uint indexed quantity); 


constructor(uintl6 chainld) { 


mockChainld = _chainld; 


// init config 
relayerFeeConfig = RelayerFeeConfig({ 
dstPriceRatio: 1e10, // 1:1, same chain, same native coin 
dstGasPriceInWei: 1e10, 
dstNativeAmtCap: 1e19, 
baseGas: 100, 
gasPerByte: 1 
}); 
protocolFeeConfig = ProtocolFeeConfig({zroFee: 1e18, nativeBP: 1000}); // BP 0.1 
oracleFee = 1e16; 


defaultAdapterParams = LzLib.buildDefaultAdapterParams(200000); 


function send(uint16 _chainld, bytes memory _path, bytes calldata _payload, address 

payable _refundAddress, address _zroPaymentAddress, bytes memory _adapterParams) 
external payable override sendNonReentrant { 

require(_path.length == 40, "LayerZeroMock: incorrect remote address size"); // only 


support evm chains 


address dstAdadr; 
assembly { 


dstAddr := mload(add(_path, 20)) 


address |zEndpoint = IzEndpointLookup[dstAddr]; 
require(IzEndpoint != address(0), "LayerZeroMock: destination LayerZero Endpoint not 


found"); 


// not handle zro token 
bytes memory adapterParams = _adapterParams.length > 0 ? adapterParams : 
defaultAdapterParams; 
(uint nativeFee, ) = estimateFees(_chainld, msg.sender, payload, zroPaymentAddress 
!= address(0x0), adapterParams); 


require(msg.value >= nativeFee, "LayerZeroMock: not enough native for fees"); 


uint64 nonce = ++outboundNonce[_chainld][msg.sender]; 


// refund if they send too much 
uint amount = msg.value - nativeFee; 
if (amount > 0) { 
(bool success, ) = _refundAddress.call{value: amount}(""); 


require(success, "LayerZeroMock: failed to refund"); 


// Mock the process of receiving msg on dst chain 
// Mock the relayer paying the dstNativeAddr the amount of extra native token 
(, uint extraGas, uint dstNativeAmt, address payable dstNativeAddr) = 


LzLib.decodeAdapterParams(adapterParams); 


if (dstNativeAmt > 0) { 
(bool success, ) = dstNativeAddr.call{value: dstNativeAmt}(""); 
if (!success) { 


emit ValueTransferFailed(dstNativeAddr, dstNativeAmt); 


bytes memory srcUaAddress = abi.encodePacked(msg.sender, dstAddr); // cast this 
address to bytes 
bytes memory payload = _payload; 
LZEndpointMock(IzEndpoint).receivePayload(mockChainld, srcUaAddress, dstAddr, 
nonce, extraGas, payload); 


} 


function receivePayload(uintl6 srcChainld, bytes calldata path, address _dstAddress, 
uint64 nonce, uint —_gasLimit, bytes calldata payload) external override 
receiveNonReentrant { 


StoredPayload storage sp = storedPayload[_srcChainld][_path]; 


// assert and increment the nonce. no message shuffling 
require(_ nonce == ++inboundNonce[_srcChainld][ path], "LayerZeroMock: wrong 


nonce"); 


// queue the following msgs inside of a stack to simulate a successful send on src, but 
not fully delivered on dst 


if (Sp.payloadHash != bytes32(0)) { 


QueuedPayload[] storage msgs = msgsToDeliver[_srcChainld][_path]; 


QueuedPayload memory newMsg = QueuedPayload(_dstAddress, nonce, payload); 


// warning, might run into gas issues trying to forward through a bunch of queued 
msgs 
// shift all the msgs over so we can treat this like a fifo via array.pop() 
if (msgs.length > 0) { 
// extend the array 


msgs.push(newMsg); 


// shift all the indexes up for pop() 
for (uint i = 0; i < msgs.length - 1; i++) { 


msgs[i + 1] = msgs[i]; 


// put the newMsg at the bottom of the stack 
msgs[0] = newMsg; 
} else { 
msgs.push(newMsg); 
} 
} else if (nextMsgBlocked) { 
storedPayload[_srcChainld][_path] = StoredPayload(uint64(_payload.length), 
_dstAddress, keccak256(_payload)); 
emit PayloadStored(_srcChainld, path, dstAddress, nonce, payload, bytes("")); 
// ensure the next msgs that go through are no longer blocked 


nextMsgBlocked = false; 


} else { 
try ILayerZeroReceiver(_dstAddress).IzReceive{gas: _gasLimit}(_srcChainld, _path, 
_nonce, payload) {} catch (bytes memory reason) { 
storedPayload[_srcChainld][_path] = StoredPayload(uint64(_payload.length), 
_dstAddress, keccak256(_payload)); 
emit PayloadStored(_srcChainld, path, dstAddress, nonce, payload, reason); 
// ensure the next msgs that go through are no longer blocked 


nextMsgBlocked = false; 


function getInboundNonce(uint16 _chainlD, bytes calldata path) external view override 
returns (uint64) { 


return inboundNonce[_chainID][_path]; 


function getOutboundNonce(uint16 chainID, address srcAddress) external view override 
returns (uint64) { 


return outboundNonce[_chainID][_srcAddress]; 


function estimateFees(uintl6 _dstChainld, address _userApplication, bytes memory 
_payload, bool paylnZRO, bytes memory _adapterParams) public view override returns (uint 
nativeFee, uint zroFee) { 


bytes memory adapterParams = _adapterParams.length > 0 ? adapterParams : 


defaultAdapterParams; 


// Relayer Fee 


uint relayerFee = _getRelayerFee(_dstChainld, 1, _userApplication, _payload.length, 


adapterParams); 


// LayerZero Fee 
uint protocolFee = _getProtocolFees(_paylInZRO, relayerFee, oracleFee); 


_paylnZRO ? zroFee = protocolFee : nativeFee = protocolFee; 


// return the sum of fees 


nativeFee = nativeFee + relayerFee + oracleFee; 


function getChainld() external view override returns (uint16) { 


return mockChainld; 


function retryPayload(uintl6 _srcChainld, bytes calldata path, bytes calldata _payload) 
external override { 
StoredPayload storage sp = storedPayload[_srcChainld][_path]; 
require(sp.payloadHash != bytes32(0), "LayerZeroMock: no stored payload"); 
require(_payload.length == sp.payloadLength && keccak256(_payload) == 


sp.payloadHash, "LayerZeroMock: invalid payload"); 


address dstAddress = sp.dstAddress; 


// empty the storedPayload 
sp.payloadLength = 0; 
sp.dstAddress = address(0); 


sp.payloadHash = bytes32(0); 


uint64 nonce = inboundNonce[_srcChainld][_ path]; 


ILayerZeroReceiver(dstAddress).IzReceive(_srcChainld, path, nonce, payload); 


emit PayloadCleared(_srcChainld, path, nonce, dstAddress); 


function hasStoredPayload(uintl6 —srcChainld, bytes calldata _path) external view 
override returns (bool) { 
StoredPayload storage sp = storedPayload[_srcChainld][_path]; 


return sp.payloadHash != bytes32(0); 


function getSendLibraryAddress(address) external view override returns (address) { 


return address(this); 


function getReceiveLibraryAddress(address) external view override returns (address) { 


return address(this); 


function isSendingPayload() external view override returns (bool) { 


return send_entered_state == ENTERED; 


function isReceivingPayload() external view override returns (bool) { 


return _receive_entered_state == ENTERED; 


function getConfig( 
uint16, /*_version*/ 
uint16, /*_chainld*/ 
address, /*_ua*/ 
uint /*_configType*/ 
) external pure override returns (bytes memory) { 


return ""; 


function getSendVersion( 
address /*_userApplication*/ 
) external pure override returns (uint16) { 


return 1; 


function getReceiveVersion( 
address /*_userApplication*/ 
) external pure override returns (uint16) { 


return 1; 


function setConfig( 
uint16, /*_version*/ 
uint16, /*_chainld*/ 
uint, /*_configType*/ 
bytes memory /*_config*/ 


) external override {} 


function setSendVersion( 
uint16 /*version*/ 


) external override {} 


function setReceiveVersion( 
uint16 /*version*/ 


) external override {} 


function forceResumeReceive(uint16 _srcChainld, bytes calldata path) external override 


StoredPayload storage sp = storedPayload[_srcChainld][_path]; 
// revert if no messages are cached. safeguard malicious UA behaviour 
require(sp.payloadHash != bytes32(0), "LayerZeroMock: no stored payload"); 


require(sp.dstAddress == msg.sender, "LayerZeroMock: invalid caller"); 


// empty the storedPayload 


sp.payloadLength = 0; 


sp.dstAddress = address(0); 


sp.payloadHash = bytes32(0); 


emit UaForceResumeReceive(_srcChainld, _path); 


// resume the receiving of msgs after we force clear the "stuck" msg 


_clearMsgQue(_srcChainld, path); 


| | ------------------------------ Other Public/External Functions 


function getLengthOfQueue(uintl6 srcChainld, bytes calldata srcAddress) external view 
returns (uint) { 


return msgsToDeliver[_srcChainld][_srcAddress].length; 


// used to simulate messages received get stored as a payload 
function blockNextMsg() external { 


nextMsgBlocked = true; 


function setDestLzEndpoint(address destAddr, address IzEndpointAddr) external { 


IzZEndpointLookup[destAddr] = IzEndpointAddr; 


function setRelayerPrice(uintl128 _dstPriceRatio, uintl28 _dstGasPricelnWei, uint128 
_dstNativeAmtCap, uint64 baseGas, uint64 gasPerByte) external { 

relayerFeeConfig.dstPriceRatio = _dstPriceRatio; 

relayerFeeConfig.dstGasPricelnWei = _dstGasPricelnWei; 

relayerFeeConfig.dstNativeAmtCap = _dstNativeAmtCap; 

relayerFeeConfig.baseGas = _baseGas; 


relayerFeeConfig.gasPerByte = gasPerByte; 


function setProtocolFee(uint _zroFee, uint nativeBP) external { 
protocolFeeConfig.zroFee = _zroFee; 


protocolFeeConfig.nativeBP = _nativeBP; 


function setOracleFee(uint oracleFee) external { 


oracleFee = _oracleFee; 


function setDefaultAdapterParams(bytes memory _adapterParams) external { 


defaultAdapterParams = _adapterParams; 


// simulates the relayer pushing through the rest of the msgs that got delayed due to the 
stored payload 


function clearMsgQue(uint16 srcChainld, bytes calldata path) internal { 


QueuedPayload[] storage msgs = msgsToDeliver[_srcChainld][_path]; 


// warning, might run into gas issues trying to forward through a bunch of queued msgs 
while (msgs.length > 0) { 
QueuedPayload memory payload = msgs[msgs.length - 1]; 
ILayerZeroReceiver(payload.dstAddress).IzZReceive(_srcChainld, _path, 
payload.nonce, payload.payload); 


msgs.pop(); 


function _getProtocolFees(bool paylnZro, uint _relayerFee, uint _oracleFee) internal view 
returns (uint) { 
if (_paylnZro) { 
return protocolFeeConfig.zroFee; 
} else { 


return ((_relayerFee + _oracleFee) * protocolFeeConfig.nativeBP) / 10000; 


function getRelayerFee( 
uint16, /* _dstChainld */ 
uint16, /* outboundProofType */ 
address, /* _userApplication */ 
uint _payloadSize, 


bytes memory _adapterParams 


) internal view returns (uint) { 
(uintl6 txType, uint extraGas, uint dstNativeAmt, ) = 
LzLib.decodeAdapterParams(_adapterParams); 
uint totalRemoteToken; // = baseGas + extraGas + requiredNativeAmount 
if (txType == 2) { 
require(relayerFeeConfig.dstNativeAmtCap >= dstNativeAmt, "LayerZeroMock: 
dstNativeAmt too large "); 
totalRemoteToken += dstNativeAmt; 
} 
// remoteGasTotal = dstGasPricelnWei * (baseGas + extraGas) 
uint remoteGasTotal = relayerFeeConfig.dstGasPricelnWei * (relayerFeeConfig.baseGas 
+ extraGas); 


totalRemoteToken += remoteGasTotal: 


// tokenConversionRate = dstPrice / localPrice 
// basePrice = totalRemoteToken * tokenConversionRate 


uint basePrice = (totalRemoteToken * relayerFeeConfig.dstPriceRatio) / 10**10; 


// pricePerByte = (dstGasPricelnWei * gasPerBytes) * tokenConversionRate 


uint pricePerByte = (relayerFeeConfig.dstGasPricelnWei * relayerFeeConfig.gasPerByte 


* relayerFeeConfig.dstPriceRatio) / 10**10; 


return basePrice + _payloadSize * pricePerByte; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\mocks/MockToken.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity “0.8.4; 


import "@openzeppelin/contracts/token/ERC20/ERC20.sol"; 


// this is a MOCK 
contract MockToken is ERC20 { 
// this is a MOCK 
constructor(string memory name_, string memory symbol_) ERC20(name_, symbol_) { 


_mint(msg.sender, 1_000_000_000 * 10**18); // mint 1B to deployoooor 


// this is a MOCK 
function mint(address to, uint amount) public { 


_mint(_to, _amount); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\mocks/OFTStakingMock.sol---- 


// SPDX-License-Identifier: BUSL-1.1 


pragma solidity “0.8.0; 


import "@openzeppelin/contracts/token/ERC20/IERC20.sol"; 

import "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol"; 
import "../token/oft/composable/IOFTReceiver.sol"; 

import "../token/oft/composable/IComposableOFTCore.sol"; 


import "../util/BytesLib.sol"; 


// OFTStakingMock is an example to integrate with OFT. It shows how to send OFT cross 
chain with a custom payload and 
// call a receiver contract on the destination chain when oft is received. 
contract OFTStakingMock is IOFTReceiver { 
using SafeERC20 for IERC20; 


using BytesLib for bytes; 


uint64 public constant DST GAS FOR_CALL = 300000; // estimate gas usage of 


onOFTReceived() 


// packet type 


uint8 public constant PT_DEPOSIT_TO_REMOTE_CHAIN = 1; 


II ... other types 


// variables 


IComposableOFTCore public oft; 
mapping(uintl6 => bytes) public remoteStakingContracts; 
mapping(address => uint) public balances; 


bool public paused; // for testing try/catch 


event Deposit(address from, uint amount); 
event Withdrawal(address to, uint amount); 


event DepositToDstChain(address from, uint16 dstChainld, bytes to, uint amountOut); 


// _oft can be any composable OFT contract, e.g. ComposableOFT, ComposableBasedOFT 
and ComposableProxyOFT. 
constructor(address oft) { 
oft = |[ComposableOFTCore(_ oft); 


IERC20(oft.token()).safeApprove(_oft, type(uint).max); 


function setRemoteStakingContract(uintl6 _chainld, bytes calldata _stakingContract) 
external { 


remoteStakingContracts[_chainld] = _stakingContract; 


function deposit(uint amount) external payable { 
IERC20(oft.token()).safeTransferFrom(msg.sender, address(this), amount); 
balances[msg.sender] += _amount; 


emit Deposit(msg.sender, amount); 


function withdraw(uint _amount) external { 


withdrawTo(_amount, msg.sender); 


function withdrawTo(uint amount, address _ to) public { 
require(balances[msg.sender] >= _amount); 
balances[msg.sender] -= _amount; 
IERC20(oft.token()).safeTransfer(_to, amount); 


emit Withdrawal(msg.sender, amount); 


function depositToDstChain( 
uint16 _dstChainld, 
bytes calldata to, // address of the owner of token on the destination chain 
uint amount, // amount of token to deposit 
bytes calldata adapterParams 
) external payable { 
bytes memory dstStakingContract = remoteStakingContracts[_dstChainld]; 


require(keccak256(dstStakingContract) != keccak256(""), "invalid _dstChainld"); 


// transfer token from sender to this contract 

// if the oft is not the proxy oft, dont need to transfer token to this contract 

// and call sendAndCall() with the msg.sender (_from) instead of address(this) 

// here we use a common pattern to be compatible with all kinds of composable OFT 


IERC20(oft.token()).safeTransferFrom(msg.sender, address(this), amount); 


bytes memory payload = abi.encode(PT_ DEPOSIT TO REMOTE _CHAIN, to); 
oft.sendAndCall{value: msg.value}(address(this), _dstChainld, dstStakingContract, 


_amount, payload, DST_GAS FOR_CALL, payable(msg.sender), address(0), adapterParams); 


emit DepositToDstChain(msg.sender, dstChainld, to, amount); 


function quoteForDeposit( 
uint16 _dstChainld, 
bytes calldata to, // address of the owner of token on the destination chain 
uint amount, // amount of token to deposit 
bytes calldata adapterParams 
) public view returns (uint nativeFee, uint zroFee) { 
bytes memory dstStakingContract = remoteStakingContracts[_dstChainld]; 


require(keccak256(dstStakingContract) != keccak256(""), "invalid _dstChainld"); 


bytes memory payload = abi.encode(PT_ DEPOSIT TO REMOTE _CHAIN, to); 
return oft.estimateSendAndCallFee(_dstChainld, dstStakingContract, amount, payload, 
DST_GAS FOR_CALL, false, adapterParams); 


} 


function onOFTReceived(uintl6 _srcChainld, bytes calldata, uint64, bytes calldata from, 
uint amount, bytes memory _payload) external override { 


require(!paused, "paused"); // for testing safe call 


require(msg.sender == address(oft), "only oft can call onOFTReceived()"); 
require(keccak256(_ from) == keccak256(remoteStakingContracts[_srcChainld]), 


"invalid from"); 


uint8 pkType; 
assembly { 


pkType := mload(add(_payload, 32)) 


if (pkType == PT_DEPOSIT TO_REMOTE_CHAIN) { 


(, bytes memory toAddrBytes) = abi.decode(_payload, (uint8, bytes)); 


address to = toAddrBytes.toAddress(0); 
balances[to] += _amount; 
} else { 


revert("invalid deposit type"); 


function setPaused(bool paused) external { 


paused = paused; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\mocks/OFTStakingMockV2.sol---- 


// SPDX-License-Identifier: BUSL-1.1 


pragma solidity “0.8.0; 


import "@openzeppelin/contracts/token/ERC20/IERC20.sol"; 

import "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol"; 
import "../token/oft/v2/IOFTV2.sol"; 

import "../token/oft/v2/IOFTReceiverV2.sol"; 


import "../util/BytesLib.sol"; 


// OFTStakingMock is an example to integrate with OFT. It shows how to send OFT cross 
chain with a custom payload and 
// call a receiver contract on the destination chain when oft is received. 
contract OFTStakingMockV2 is lOFTReceiverV2 { 
using SafeERC20 for IERC20; 


using BytesLib for bytes; 


uint64 public constant DST GAS FOR_CALL = 300000; // estimate gas usage of 


onOFTReceived() 


// packet type 


uint8 public constant PT_DEPOSIT_TO_REMOTE_CHAIN = 1; 


II ... other types 


// variables 


IOFTV2 public oft; 
mapping(uintl6 => bytes32) public remoteStakingContracts; 
mapping(address => uint) public balances; 


bool public paused; // for testing try/catch 


event Deposit(address from, uint amount); 
event Withdrawal(address to, uint amount); 


event DepositToDstChain(address from, uint16 dstChainld, bytes to, uint amountOut); 


// _oft can be any composable OFT contract, e.g. ComposableOFT, ComposableBasedOFT 
and ComposableProxyOFT. 
constructor(address oft) { 
oft = IOFTV2(_oft); 


IERC20(oft.token()).safeApprove(_oft, type(uint).max); 


function setRemoteStakingContract(uint16 chainld, bytes32 stakingContract) external { 


remoteStakingContracts[_chainld] = _stakingContract; 


function deposit(uint amount) external payable { 
IERC20(oft.token()).safeTransferFrom(msg.sender, address(this), amount); 
balances[msg.sender] += _amount; 


emit Deposit(msg.sender, amount); 


function withdraw(uint _amount) external { 


withdrawTo(_amount, msg.sender); 


function withdrawTo(uint amount, address _to) public { 
require(balances[msg.sender] >= _amount); 
balances[msg.sender] -= _amount; 
IERC20(oft.token()).safeTransfer(_to, amount); 


emit Withdrawal(msg.sender, amount); 


function depositToDstChain( 
uint16 _dstChainld, 
bytes calldata to, // address of the owner of token on the destination chain 
uint amount, // amount of token to deposit 
bytes calldata adapterParams 
) external payable { 
bytes32 dstStakingContract = remoteStakingContracts[_dstChainld]; 


require(dstStakingContract != bytes32(0), "invalid _dstChainld"); 


// transfer token from sender to this contract 

// if the oft is not the proxy oft, dont need to transfer token to this contract 

// and call sendAndCall() with the msg.sender (_from) instead of address(this) 

// here we use a common pattern to be compatible with all kinds of composable OFT 


IERC20(oft.token()).safeTransferFrom(msg.sender, address(this), amount); 


bytes memory payload = abi.encode(PT_ DEPOSIT TO REMOTE CHAIN, to); 
ICommonOFT.LzCallParams memory callParams = 

ICommonOFT.LzCallParams(payable(msg.sender), address(0), _adapterParams); 
oft.sendAndCall{value: msg.value}(address(this), _dstChainld, dstStakingContract, 


_amount, payload, DST_GAS FOR_CALL, callParams); 


emit DepositToDstChain(msg.sender, dstChainld, to, amount); 


function quoteForDeposit( 
uint16 _dstChainld, 
bytes calldata to, // address of the owner of token on the destination chain 
uint amount, // amount of token to deposit 
bytes calldata adapterParams 
) public view returns (uint nativeFee, uint zroFee) { 
bytes32 dstStakingContract = remoteStakingContracts[_dstChainld]; 


require(dstStakingContract != bytes32(0), "invalid _dstChainld"); 


bytes memory payload = abi.encode(PT_ DEPOSIT TO REMOTE CHAIN, to); 
return oft.estimateSendAndCallFee(_dstChainld, dstStakingContract, amount, payload, 
DST_GAS FOR_CALL, false, adapterParams); 


} 


function onOFTReceived(uint16 srcChainld, bytes calldata, uint64, bytes32 from, uint 


_amount, bytes memory _payload) external override { 


require(!paused, "paused"); // for testing safe call 
require(msg.sender == address(oft), "only oft can call onOFTReceived()"); 


require(_from == remoteStakingContracts[_srcChainld], “invalid from"); 


uint8 pkType; 
assembly { 


pkType := mload(add(_payload, 32)) 


if (pkType == PT_DEPOSIT TO_REMOTE_CHAIN) { 


(, bytes memory toAddrBytes) = abi.decode(_payload, (uint8, bytes)); 


address to = toAddrBytes.toAddress(0); 
balances[to] += _amount; 
} else { 


revert("invalid deposit type"); 


function setPaused(bool paused) external { 


paused = paused; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\mocks/ONFT721Mock.sol---- 


// SPDX-License-Identifier: BUSL-1.1 


pragma solidity “0.8.0; 


import "../token/onft/ONFT721.sol"; 


contract ONFT721Mock is ONFT721 { 


constructor(string memory _name, string memory _symbol, uint256 _minGasToStore, 


address _layerZeroEndpoint) ONFT721(_name, _symbol, _minGasToStore, 


_layerZeroEndpoint) {} 


function mint(address tokenOwner, uint newld) external payable { 


_safeMint(_tokenOwner, _newld); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\stargate/StargateSwap.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity “0.8.4; 


pragma abicoder v2; 


import "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol"; 
import "@openzeppelin/contracts/token/ERC20/IERC20.sol"; 

import "../interfaces/IStargateRouter.sol"; 

import "../interfaces/IStargateReceiver.sol"; 


import "../interfaces/IStargateWidget.sol"; 


contract StargateSwap is IStargateReceiver { 


using SafeERC20 for IERC20; 


address public stargateRouter; // an IStargateRouter instance 
address public widgetSwap; 


bytes2 public partnerld; 


event ReceivedOnDestination(address token, uint qty); 


constructor(address stargateRouter, address widgetSwap, bytes2 partnerld) { 
stargateRouter = stargateRouter; 
widgetSwap = _widgetSwap; 


partnerld = _partnerld; 


// swap tokens to another chain 
function swap( 
uint qty, 


address bridgeToken, // the address of the native ERC20 to swap() - *must* 


be the token for the poolld 


uintl6 dstChainld, // Stargate/LayerZero chainld 
uint16 srcPoolld, // stargate poolld - *must* be the poolld for the qty 
asset 
uint16 dstPoolld, // stargate destination poolld 
address to, // the address to send the destination tokens to 
address destStargateComposed // destination contract. it must implement 


sgReceive() 


) external payable { 


require(msg.value > 0, "stargate requires a msg.value to pay crosschain message"); 


require(qty > 0, ‘error: swap() requires qty > 0’); 


// encode payload data to send to destination contract, which it will handle with 


sgReceive() 


bytes memory data = abi.encode(to); 


// this contract calls stargate swap() 
IERC20(bridgeToken).safeTransferFrom(msg.sender, address(this), qty); 


IERC20(bridgeToken).safeApprove(address(stargateRouter), qty); 


// Stargate's Router.swap() function sends the tokens to the destination chain. 


IStargateRouter(stargateRouter).swap{value:msg.value }( 


dstChainld, // the destination chain id 

srcPoolld, // the source Stargate poolld 

dstPoolld, // the destination Stargate poolld 
payable(msg.sender), // refund adddress. if msg.sender pays too 


much gas, return extra eth 
qty, // total tokens to send to destination chain 
O, // min amount allowed out 
IStargateRouter.IZTxObj(200000, 0, "Ox"), // default IZTxObj 
abi.encodePacked(destStargateComposed), // destination address, the 
sgReceive() implementer 


data // bytes payload 


// OPTIONAL... Register the partner id for receiving fees from composing stargate 


IStargateWidget(widgetSwap).partnerSwap(partnerld); 


// sgReceive() - the destination contract must implement this function to receive the 
tokens and payload 

function sgReceive(uint16 /*_chainld*/, bytes memory /*_srcAddress*/, uint /*_nonce*/, 
address token, uint amountLD, bytes memory _payload) override external { 


require(msg.sender == address(stargateRouter), "only stargate router can call 


sgReceive!"); 
(address toAddr) = abi.decode(_payload, (address)); 
// send transfer token/amountLD to _toAddr 
IERC20(_token).transfer(_toAddr, amountLD); 


emit ReceivedOnDestination(_token, amountLD); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\stargate/WidgetSwap.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity 0.8.4; 


pragma abicoder v2; 


import "@openzeppelin/contracts/security/ReentrancyGuard.sol"; 
import "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol"; 
import "../interfaces/IStargateRouter.sol"; 

import "../interfaces/IStargateRouterETH.sol"; 

import "../interfaces/IStargateFactory.sol"; 


import "../interfaces/IStargateWidget.sol"; 


contract WidgetSwap is ReentrancyGuard, IStargateWidget { 


using SafeERC20 for IERC20; 


IStargateRouter public immutable stargateRouter; 
IStargateRouterETH public immutable stargateRouterETH; 
IStargateFactory public immutable stargateFactory; 

uint256 public constant TENTH_BPS_ DENOMINATOR = 100000; 
uint256 public constant MAX_UINT = 2**256 - 1; 


mapping(address => bool) public tokenApproved; 


constructor(address _stargateRouter, address _stargateRouterETH, address 
_stargateFactory) { 


stargateRouter = IStargateRouter(_stargateRouter); 


stargateRouterETH = IStargateRouterETH(_stargateRouterETH); 


stargateFactory = IStargateFactory(_stargateFactory); 


// allow anyone to emit this msg alongside their stargate tx so they can get credited for 
their referral 

// to get credit this event must be emitted in the same tx as a stargate swap event 

function partnerSwap(bytes2 _partnerld) external override { 


emit PartnerSwap(_partnerld); 


function swapTokens( 
uintl6 _dstChainld, 
uint16 _srcPoolld, 
uint16 _dstPoolld, 
uint256 _amountLD, 
uint256 minAmountLD, 
IStargateRouter.IZTxObj calldata_IzTxParams, 
bytes calldata to, 
bytes2 _partnerld, 
FeeObj calldata feeObj 
) external override nonReentrant payable { 


uint256 widgetFee = _getAndPayWidgetFee(_srcPoolld, amountLD, feeOb)); 


stargateRouter.swap{value:msg.value}( 


_dstChainld, 


_srcPoolld, 

_dstPoolld, 
payable(msg.sender), 
_amountLD - widgetFee, 
_minAmountLD, 
_IzTxParams, 

_to, 


"Ox" 


emit WidgetSwapped(_partnerld, feeObj.tenthBps, widgetFee); 


function swapETH( 
uintl6 _dstChainld, 
uint256 _amountLD, 
uint256 minAmountLD, 
bytes calldata to, 
bytes2 _partnerld, 
FeeObj calldata feeObj 
) external override nonReentrant payable { 
// allows us to deploy same contract on non eth chains 
require(address(stargateRouterETH) != address(Ox0), "WidgetSwap: func not 


available"); 


uint256 widgetFee = _getAndPayWidgetFeeETH(_amountLD, feeOb)j); 


// "value:" contains the amount of eth to swap and the stargate/layerZero fees, minus 
the widget fee 
stargateRouterETH.swapETH {value:msg.value - widgetFee } ( 
_dstChainld, 
payable(msg.sender), 
_to, 
_amountLD - widgetFee, 


_minAmountLD 


emit WidgetSwapped(_partnerld, feeObj.tenthBps, widgetFee); 


function getAndPayWidgetFee( 
uint16 _srcPoolld, 
uint256 amountLD, 
FeeObj calldata feeObj 
) internal returns (uint256 widgetFee) { 
// corresponding token to the poolld 


address token = stargateFactory.getPool(_srcPoolld).token(); 


// move all the tokens to this contract 


IERC20(token).safeTransferFrom(msg.sender, address(this), _amountLD); 


// calculate the widgetFee 


widgetFee = _amountLD * feeObj.tenthBps / TENTH_BPS DENOMINATOR; 


// pay the widget fee 


IERC20(token).safeTransfer(_feeObj.feeCollector, widgetFee); 


// only call max approval once 
if (!tokenApproved[token]) { 
tokenApproved[token] = true; 
// allow stargateRouter to spend the tokens to be transferred 


IERC20(token).safeApprove(address(stargateRouter), MAX_UINT); 


return widgetFee; 


function getAndPayWidgetFeeETH( 
uint256 amountLD, 
FeeObj calldata feeObj 
) internal returns (uint256 widgetFee) { 
// calculate the widgetFee 
widgetFee = _amountLD * feeObj.tenthBps / TENTH_BPS DENOMINATOR; 


require(msg.value > widgetFee, "WidgetSwap: not enough eth for widgetFee"); 


// verify theres enough eth to cover the amount to swap 


require(msg.value - widgetFee > _amountLD, "WidgetSwap: not enough eth for swap"); 


// pay the widget fee 
(bool success, ) = _feeObj.feeCollector.call{value: widgetFee}(""); 


require(success, "WidgetSwap: failed to transfer widgetFee"); 


return widgetFee; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\oft/IOFT.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity >=0.5.0; 


import "./IOFTCore.sol"; 


import "@openzeppelin/contracts/token/ERC20/IERC20.sol"; 


[** 
* @dev Interface of the OFT standard 
i 


interface IOFT is lOFTCore, IERC20 { 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\oft/IOFTCore.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity >=0.5.0; 


import "@openzeppelin/contracts/utils/introspection/IERC165.sol"; 


[** 

* @dev Interface of the IOFT core standard 

i 

interface lOFTCore is IERC165 { 
[** 
* @dev estimate send token ©_tokenld* to (*_dstChainld’, ~_toAddress’ ) 
* dstChainld - LO defined chain id to send tokens too 


* toAddress - dynamic bytes array which contains the address to whom you are sending 
tokens to on the dstChain 

* amount - amount of the tokens to transfer 

* useZro - indicates to use zro to pay LO fees 

* adapterParam - flexible bytes array to indicate messaging adapter services in LO 

my, 

function estimateSendFee(uint16 _dstChainld, bytes calldata toAddress, uint _amount, 
bool _useZro, bytes calldata _adapterParams) external view returns (uint nativeFee, uint 


zroFee); 


[** 


* @dev send `_amount` amount of token to (*_dstChainld*, ~_toAddress’) from `_from` 


* ` from’ the owner of token 

* *_dstChainld* the destination chain identifier 

* ` toAddress can be any size depending on the ‘dstChainld°. 

* ` amount the quantity of tokens in wei 

* ` refundAddress` the address LayerZero refunds if too much message fee is sent 

* ` zroPaymentAddress` set to address(0x0) if not paying in ZRO (LayerZero Token) 

* ` adapterParams is a flexible bytes array to indicate messaging adapter services 

*/ 

function sendFrom(address from, uint16 _dstChainld, bytes calldata _toAddress, uint 

_amount, address payable _refundAddress, address _zroPaymentAddress, bytes calldata 


_adapterParams) external payable; 


[** 
* @dev returns the circulating amount of tokens on current chain 
*/ 


function circulatingSupply() external view returns (uint); 


[** 
* @dev returns the address of the ERC20 token 
a 


function token() external view returns (address); 


[** 
* @dev Emitted when `_amount` tokens are moved from the `_sender` to (`_dstChainld`, 
` toAddress`) 


* ` nonce’ is the outbound nonce 


*/ 
event SendToChain(uint16 indexed _dstChainld, address indexed from, bytes _toAddress, 


uint amount); 


[** 
* @dev Emitted when `_amount` tokens are received from `_srcChainld into the 
` _toAddress` on the local chain. 
* ` nonce’ is the inbound nonce. 
*/ 


event ReceiveFromChain(uint16 indexed _srcChainld, address indexed _to, uint _amount); 


event SetUseCustomAdapterParams(bool _useCustomAdapterParams); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\oft/OFT.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity “0.8.0; 


import "@openzeppelin/contracts/token/ERC20/ERC20.sol"; 
import "@openzeppelin/contracts/utils/introspection/IERC165.sol"; 
import "./IOFT.sol"; 


import "./OFTCore.sol"; 


// override decimal() function is needed 
contract OFT is OFTCore, ERC20, IOFT { 
constructor(string memory _name, string memory _symbol, address _|zEndpoint) 


ERC20(_name, symbol) OFTCore(_IlzEndpoint) {} 


function supportsInterface(bytes4 interfaceld) public view virtual override(OFTCore, 


IERC165) returns (bool) { 


return interfaceld == type(IOFT).interfaceld || interfaceld == type(IERC20).interfaceld 
|| super.supportsInterface(interfaceld); 


} 


function token() public view virtual override returns (address) { 


return address(this); 


function circulatingSupply() public view virtual override returns (uint) { 


return totalSupply(); 


function debitFrom(address from, uint16, bytes memory, uint amount) internal virtual 
override returns(uint) { 
address spender = _msgSender(); 
if (_ from != spender) spendAllowance(_from, spender, amount); 
_burn(_from, _amount); 


return amount; 


function _creditTo(uintl6, address _toAddress, uint _amount) internal virtual override 
returns(uint) { 
_mint(_toAddress, amount); 


return amount; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\oft/OFTCore.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity “0.8.0; 


import "../../IZApp/NonblockingLzApp.sol"; 


import "./IOFTCore.sol"; 


import "@openzeppelin/contracts/utils/introspection/ERC165.sol"; 


abstract contract OFTCore is NonblockingLzApp, ERC165, l|OFTCore { 


using BytesLib for bytes; 


uint public constant NO_EXTRA_GAS = 0; 


// packet type 


uint16 public constant PT_SEND = 0; 


bool public useCustomAdapterParams; 


constructor(address _|lzEndpoint) NonblockingLzApp(_IzEndpoint) {} 


function supportsinterface(bytes4 interfaceld) public view virtual override(ERC165, 


IERC165) returns (bool) { 


return interfaceld type(lIOFTCore).interfaceld || 


super.supportsIinterface(interfaceld); 


} 


function estimateSendFee(uint16 _dstChainld, bytes calldata toAddress, uint amount, 


bool _useZro, bytes calldata _adapterParams) public view virtual override returns (uint 


nativeFee, uint zroFee) { 
// mock the payload for sendFrom() 
bytes memory payload = abi.encode(PT SEND, toAddress, amount); 
return IzEndpoint.estimateFees(_dstChainld, address(this), payload, _useZro, 


_adapterParams); 


} 


function sendFrom(address from, uint16 _dstChainld, bytes calldata _toAddress, uint 


amount, address payable _refundAddress, address _zroPaymentAddress, bytes calldata 


_adapterParams) public payable virtual override { 


_send(_ from, _dstChainld, toAddress, amount, refundAddress, zroPaymentAddress, 


_adapterParams); 


} 


function setUseCustomAdapterParams(bool _useCustomAdapterParams) public virtual 


onlyOwner { 


useCustomAdapterParams = _useCustomAdapterParams; 


emit SetUseCustomAdapterParams(_useCustomAdapterParams); 


function _nonblockingLzReceive(uintl6 _srcChainld, bytes memory _srcAddress, uint64 
_nonce, bytes memory _payload) internal virtual override { 


uintl6 packetType; 


assembly { 


packetType := mload(add(_payload, 32)) 


if (packetType == PT_SEND) { 
_sendAck(_srcChainld, srcAddress, nonce, payload); 
} else { 


revert("OFTCore: unknown packet type"); 


function _send(address from, uintl6 _dstChainld, bytes memory _toAddress, uint 
_amount, address payable _refundAddress, address _zroPaymentAddress, bytes memory 
_adapterParams) internal virtual { 


_checkAdapterParams(_dstChainld, PT_ SEND, adapterParams, NO_EXTRA GAS); 


uint amount = _debitFrom(_from, dstChainld, toAddress, amount); 


bytes memory IzPayload = abi.encode(PT SEND, toAddress, amount); 


_IzSend(_dstChainld, IzPayload, refundAddress, zroPaymentAddress, adapterParams, 


msg.value); 


emit SendToChain(_dstChainld, from, toAddress, amount); 


function sendAck(uint16 srcChainld, bytes memory, uint64, bytes memory _payload) 


internal virtual { 
(, bytes memory toAddressBytes, uint amount) = abi.decode(_payload, (uint16, bytes, 


uint)); 


address to = toAddressBytes.toAddress(0); 


amount = _creditTo(_srcChainld, to, amount); 


emit ReceiveFromChain(_srcChainld, to, amount); 


function _checkAdapterParams(uintl6 _dstChainld, uintl6 _pkType, bytes memory 
_adapterParams, uint _extraGas) internal virtual { 
if (useCustomAdapterParams) { 
_checkGasLimit(_dstChainld, pkType, adapterParams, _extraGas); 
} else { 


require(_adapterParams.length == 0, "OFTCore: _adapterParams must be empty."); 


function _debitFrom(address from, uint16 dstChainld, bytes memory _toAddress, uint 


_amount) internal virtual returns(uint); 


function _creditTo(uint16 srcChainld, address toAddress, uint amount) internal virtual 
returns(uint); 


} 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\oft\composable/ComposableB 
asedOFT.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.0; 


import "./ComposableOFT.sol"; 


contract ComposableBasedOFT is ComposableOFT { 
constructor(string memory _name, string memory _symbol, address _|zEndpoint) 


ComposableOFT(_name, symbol, IzEndpoint) {} 


function circulatingSupply() public view virtual override returns (uint) { 
unchecked { 


return totalSupply() - balanceOf(address(this)); 


function debitFrom(address from, uint16, bytes memory, uint amount) internal virtual 
override returns(uint) { 
address spender = _msgSender(); 
if (_ from != spender) spendAllowance(_from, spender, amount); 
_transfer(_from, address(this), amount); 


return amount; 


function _creditTo(uintl16, address _toAddress, uint _amount) internal virtual override 
returns(uint) { 
_transfer(address(this), toAddress, amount); 


return _amount; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\oft\composable/ComposableO 
FT.Sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.0; 


import "@openzeppelin/contracts/token/ERC20/ERC20.sol"; 
import "./I\ComposableOFT.sol"; 


import "./ComposableOFTCore.sol"; 


contract ComposableOFT is ComposableOFTCore, ERC20, IComposableOFT { 
constructor(string memory _name, string memory _symbol, address _|zEndpoint) 


ERC20(_name, symbol) ComposableOFTCore(_IzEndpoint) {} 


function supportsinterface(bytes4  interfaceld) public view virtual 
override(ComposableOFTCore, IERC165) returns (bool) { 

return interfaceld == type(IComposableOFT).interfaceld || interfaceld == 
type(IOFT).interfaceld || interfaceld == type(IERC20).interfaceld || 
super.supportsIinterface(interfaceld); 


} 


function circulatingSupply() public view virtual override returns (uint) { 


return totalSupply(); 


function token() public view virtual override returns (address) { 


return address(this); 


function debitFrom(address from, uint16, bytes memory, uint amount) internal virtual 
override returns(uint) { 
address spender = _msgSender(); 
if (_ from != spender) spendAllowance(_from, spender, amount); 
_burn(_from, _amount); 


return amount; 


function _creditTo(uintl6, address _toAddress, uint _amount) internal virtual override 
returns(uint) { 
_mint(_toAddress, amount); 


return amount; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\oft\composable/ComposableO 
FTCore.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.0; 


import "../OFTCore.sol"; 
import "./IOFTReceiver.sol"; 
import "./I\ComposableOFTCore.sol"; 


import "../../../util/ExcessivelySafeCall.sol"; 


abstract contract ComposableOFTCore is OFTCore, I|ComposableOFTCore { 
using ExcessivelySafeCall for address; 


using BytesLib for bytes; 


// packet type 


uintl6 public constant PT_ SEND_AND_ CALL = 1; 


Mapping(uintl6 => mapping(bytes => mapping(uint64 => bytes32))) public 


failedOFTReceivedMessages; 


constructor(address _|lzEndpoint) OFTCore(_IzEndpoint) {} 


function supportsInterface(bytes4 interfaceld) public view virtual override(OFTCore, 


IERC165) returns (bool) { 


return interfaceld ==  type(IComposableOFTCore).interfaceld || 


super.supportsInterface(interfaceld); 


} 


function estimateSendAndCallFee(uintl6 _dstChainld, bytes calldata _toAddress, uint 
_amount, bytes calldata _payload, uint64 _dstGasForCall, bool _useZro, bytes calldata 


_adapterParams) public view virtual override returns (uint nativeFee, uint zroFee) { 


// mock the payload for sendAndCall() 
bytes memory payload = _— abi.encode(PT SEND AND CALL, 
abi.encodePacked(msg.sender), toAddress, amount, payload, dstGasForCall); 


return IzEndpoint.estimateFees(_dstChainld, address(this), payload, _useZro, 


_adapterParams); 


} 


function sendAndCall(address from, uint16 dstChainld, bytes calldata toAddress, uint 
_amount, bytes calldata payload, uint64 dstGasForCall, address payable _refundAddress, 


address _zroPaymentAddress, bytes calldata _adapterParams) public payable virtual 


override { 
_sendAndCall(_from, _dstChainld, _toAddress, _amount, payload, _dstGasForCall, 


_refundAddress, _zroPaymentAddress, adapterParams); 


} 


function retryOFTReceived(uintl6 srcChainld, bytes calldata srcAddress, uint64 nonce, 
bytes calldata from, address to, uint amount, bytes calldata payload) public virtual 
override { 
bytes32 msgHash = failedOFTReceivedMessages[_srcChainld][_srcAddress][_nonce]; 


require(msgHash != bytes32(0), "ComposableOFTCore: no failed message to retry"); 


bytes32 hash = keccak256(abi.encode(_from, to, amount, payload)); 


require(hash == msgHash, "ComposableOFTCore: failed message hash mismatch"); 


delete failedOFTReceivedMessages[_srcChainld][_srcAddress][_nonce]; 
lIOFTReceiver(_to).onOFTReceived(_srcChainld, srcAddress, nonce, from, _amount, 
_payload); 


emit RetryOFTReceivedSuccess(hash); 


function _nonblockingLzReceive(uintl6 srcChainld, bytes memory _srcAddress, uint64 
_nonce, bytes memory _payload) internal virtual override { 
uintl6 packetType; 
assembly { 


packetType := mload(add(_payload, 32)) 


if (packetType == PT_SEND) { 
_sendAck(_srcChainld, srcAddress, nonce, payload); 
} else if (packetType == PT SEND_AND CALL) { 
_sendAndCallAck(_srcChainld, srcAddress, nonce, payload); 
} else { 


revert("ComposableOFTCore: unknown packet type"); 


function sendAndCall(address from, uintl6 dstChainld, bytes memory _toAddress, uint 

_amount, bytes calldata payload, uint64 dstGasForCall, address payable _refundAddress, 
address zroPaymentAddress, bytes memory _adapterParams) internal virtual { 

_checkAdapterParams(_dstChainld, PT_SEND AND CALL, _adapterParams, 


_dstGasForCall); 


uint amount = debitFrom(_from, dstChainld, toAddress, amount); 


bytes memory IzPayload = _= abi.encode(PT_SEND_AND CALL, 
abi.encodePacked(msg.sender), toAddress, amount, payload, dstGasForCall); 
_IzSend(_dstChainld, IzPayload, refundAddress, zroPaymentAddress, adapterParams, 


msg.value); 


emit SendToChain(_dstChainld, from, toAddress, amount); 


function _sendAndCallAck(uint16 srcChainld, bytes memory _srcAddress, uint64 nonce, 


bytes memory _payload) internal virtual { 


(, bytes memory from, bytes memory toAddress, uint amount, bytes memory payload, 


uint64 gasForCall) = abi.decode(_payload, (uint16, bytes, bytes, uint, bytes, uint64)); 


address to = toAddress.toAddress(0); 


amount = _creditTo(_srcChainld, to, amount); 


emit ReceiveFromChain(_srcChainld, to, amount); 


if (!_isContract(to)) { 


emit NonContractAddress(to); 


return; 


_safeCallOnOFTReceived(_srcChainld, srcAddress, nonce, from, to, amount, payload, 


gasForCall); 


} 


function _safeCallOnOFTReceived(uint16 srcChainld, bytes memory _srcAddress, uint64 


_nonce, bytes memory from, address to, uint _amount, bytes memory _payload, uint 


_gasForCall) internal virtual { 


(bool success, bytes memory reason) = _to.excessivelySafeCall(_gasForCall, 150, 


abi.encodeWithSelector(IOFTReceiver.onOFTReceived.selector, = srcChainld, _srcAddress, 
_nonce, from, amount, payload)); 


if ('success) { 


failedOFTReceivedMessages|[_srcChainld][_srcAddress][_nonce] 


keccak256(abi.encode(_from, to, amount, payload)); 


emit CallOFTReceivedFailure(_srcChainld, srcAddress, nonce, from, to, amount, 


_payload, reason); 


} else { 


bytes32 hash = keccak256(abi.encode(_from, to, amount, payload)); 


emit CallOFTReceivedSuccess(_srcChainld, srcAddress, nonce, hash); 


function isContract(address account) internal view returns (bool) { 


return _account.code.length > 0; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\oft\composable/ComposableP 
roxyOFT.sol---- 
// SPDX-License-Identifier: MIT 


pragma solidity *0.8.0; 


import "./ComposableOFTCore.sol"; 


import "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol"; 


contract ComposableProxyOFT is ComposableOFTCore { 


using SafeERC20 for IERC20; 


IERC20 internal immutable innerToken; 


constructor(address |zEndpoint, address proxyToken) ComposableOFTCore(_IzEndpoint) 


innerloken = IERC20(_proxyToken); 


function circulatingSupply() public view virtual override returns (uint) { 


unchecked { 


return innerToken.totalSupply() - innerToken.balanceOf(address(this)); 


function token() public view virtual override returns (address) { 


return address(innerToken); 


function debitFrom(address from, uint16, bytes memory, uint amount) internal virtual 
override returns(uint) { 
require(_ from == _msgSender(), "ComposableProxyOFT: owner is not send caller"); 
uint before = innerToken.balanceOf(address(this)); 
innerToken.safeTransferFrom(_from, address(this), amount); 


return innerloken.balanceOf(address(this)) - before; 


function _creditTo(uintl6, address _toAddress, uint _amount) internal virtual override 
returns(uint) { 

uint before = innerToken.balanceOf(_toAddress); 

innerToken.safeTransfer(_toAddress, amount); 


return innerToken.balanceOf(_toAddress) - before; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\oft\composable/IComposable 
OFT.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity >=0.5.0; 


import "./I\ComposableOFTCore.sol"; 


import "../IOFT.sol"; 


[** 
* @dev Interface of the OFT standard 
| 


interface IComposableOFT is lOFT, IComposableOFTCore { 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\oft\composable/IComposable 
OFTCore.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity >=0.5.0; 


import "../\OFTCore.sol"; 


[** 
* @dev Interface of the composable OFT core standard 
*/ 
interface IComposableOFTCore is lOFTCore { 
function estimateSendAndCallFee(uintl6 _dstChainld, bytes calldata _toAddress, uint 
_amount, bytes calldata _payload, uint64 _dstGasForCall, bool _useZro, bytes calldata 


_adapterParams) external view returns (uint nativeFee, uint zroFee); 


function sendAndCall(address from, uint16 dstChainld, bytes calldata toAddress, uint 
_amount, bytes calldata payload, uint64 dstGasForCall, address payable _refundAddress, 


address zroPaymentAddress, bytes calldata_adapterParams) external payable; 


function retryOFTReceived(uintl16 srcChainld, bytes calldata srcAddress, uint64 _nonce, 


bytes calldata from, address to, uint amount, bytes calldata_ payload) external; 


event CallOFTReceivedFailure(uintl6 indexed _srcChainld, bytes _srcAddress, uint64 


_nonce, bytes from, address indexed to, uint amount, bytes payload, bytes reason); 


event CallOFTReceivedSuccess(uintl6 indexed _srcChainld, bytes _srcAddress, uint64 


_nonce, bytes32 _hash); 


event RetryOFTReceivedSuccess(bytes32 _messageHash); 


event NonContractAddress(address address); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\oft\composable/IOFTReceiver. 
sol---- 


// SPDX-License-Identifier: BUSL-1.1 


pragma solidity >=0.5.0; 


interface lOFTReceiver { 
[** 
* @dev Called by the OFT contract when tokens are received from source chain. 
* @param _srcChainld The chain id of the source chain. 
* @param _srcAddress The address of the OFT token contract on the source chain. 
* @param _nonce The nonce of the transaction on the source chain. 
* @param from The address of the account who calls the sendAndCall() on the source 
chain. 
* @param _amount The amount of tokens to transfer. 
* @param _payload Additional data with no specified format. 
*/ 
function onOFTReceived(uint16 _srcChainld, bytes calldata _srcAddress, uint64 _nonce, 
bytes calldata from, uint amount, bytes calldata payload) external; 


} 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\oft\extension/BasedOFT.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity “0.8.0; 


import "../OFT.sol"; 


contract BasedOFT is OFT { 
constructor(string memory _name, string memory _symbol, address _|zEndpoint) 


OFT(_name, symbol, |zEndpoint) {} 


function circulatingSupply() public view virtual override returns (uint) { 
unchecked { 


return totalSupply() - balanceOf(address(this)); 


function debitFrom(address from, uint16, bytes memory, uint amount) internal virtual 
override returns(uint) { 
address spender = _msgSender(); 
if (_ from != spender) spendAllowance(_from, spender, amount); 
_transfer(_from, address(this), amount); 


return amount; 


function _creditTo(uintl16, address _toAddress, uint _amount) internal virtual override 


returns(uint) { 
_transfer(address(this), toAddress, amount); 


return amount; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\oft\extension/GlobalCappedO 
FT.Sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.0; 


import "./BasedOFT.sol"; 


import "@openzeppelin/contracts/token/ERC20/extensions/ERC20Capped.sol"; 


[** 
* @dev Extension of {OFT} that adds a global cap to the supply of tokens across all chains. 
*/ 
contract GlobalCappedOFT is BasedOFT, ERC20Capped { 
constructor(string memory _name, string memory _symbol, uint _cap, address 


_IzEndpoint) BasedOFT(_name, symbol, _lzEndpoint) ERC20Capped(_cap) {} 


function _mint(address account, uint amount) internal virtual override(ERC20, 
ERC20Capped) { 


ERC20Capped. mint(account, amount); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\oft\extension/NativeOFT.sol--- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.0; 


import "@openzeppelin/contracts/security/ReentrancyGuard.sol"; 


import "../OFT.sol"; 


contract NativeOFT is OFT, ReentrancyGuard { 


event Deposit(address indexed dst, uint amount); 


event Withdrawal(address indexed src, uint amount); 


constructor(string memory _name, string memory _symbol, address _|zEndpoint) 


OFT(_name, symbol, IzEndpoint) {} 


function sendFrom(address from, uint16 _dstChainld, bytes calldata toAddress, uint 
_amount, address payable _refundAddress, address _zroPaymentAddress, bytes calldata 
_adapterParams) public payable virtual override(OFTCore, lIOFTCore) { 
_send(_ from, _dstChainld, toAddress, amount, refundAddress, zroPaymentAddress, 
_adapterParams); 


} 


function _send(address from, uintl6 _dstChainld, bytes memory _toAddress, uint 


_amount, address payable _refundAddress, address _zroPaymentAddress, bytes memory 


_adapterParams) internal virtual override(OFTCore) { 
uint messageFee = debitFromNative(_from, dstChainld, toAddress, amount); 


bytes memory |zPayload = abi.encode(PT_ SEND, toAddress, amount); 


if (useCustomAdapterParams) { 
_checkGasLimit(_dstChainld, PT_SEND, _adapterParams, NO_EXTRA_GAS); 
} else { 
require(_adapterParams.length == 0, "NativeOFT: _adapterParams must be 
empty."); 


} 


_IzSend(_dstChainld, IzPayload, refundAddress, zroPaymentAddress, adapterParams, 
messageFee); 


} 


function deposit() public payable { 
_mint(msg.sender, msg.value); 


emit Deposit(msg.sender, msg.value); 


function withdraw(uint amount) public nonReentrant { 
require(balanceOf(msg.sender) >= _amount, "NativeOFT: Insufficient balance."); 
_burn(msg.sender, amount); 
(bool success, ) = msg.sender.call{value: amount}(""); 
require(success, "NativeOFT: failed to unwrap"); 


emit Withdrawal(msg.sender, amount); 


function _debitFromNative(address from, uint16, bytes memory, uint _amount) internal 


returns (uint messageFee) { 


messageFee = msg.sender == from ? _debitMsgSender(_amount) 
_debitMsgFrom(_from, _amount); 


} 


function debitMsgSender(uint _amount) internal returns (uint messageFee) { 


uint msgSenderBalance = balanceOf(msg.sender); 


if (msgSenderBalance < amount) { 


require(msgSenderBalance + msg.value >= _amount, "NativeOFT: Insufficient 


msg.value"); 


// user can cover difference with additional msg.value ie. wrapping 
uint mintAmount = _amount - msgSenderBalance; 


_mint(address(msg.sender), mintAmount); 


// update the messageFee to take out mintAmount 
messageFee = msg.value - mintAmount; 
} else { 


messageFee = msg.value; 


_transfer(msg.sender, address(this), amount); 


return messageFee; 


function debitMsgFrom(address from, uint amount) internal returns (uint messageFee) 


uint msgFromBalance = balanceOf(_from); 


if (msgFromBalance < amount) { 


require(msgFromBalance + msg.value >= _amount, "NativeOFT: Insufficient 


msg.value"); 


// user can cover difference with additional msg.value ie. wrapping 
uint mintAmount = _amount - msgFromBalance; 


_mint(address(msg.sender), mintAmount); 


// transfer the differential amount to the contract 


_transfer(msg.sender, address(this), mintAmount); 


// overwrite the _amount to take the rest of the balance from the _from address 


_amount = msgFromBalance; 


// update the messageFee to take out mintAmount 
messageFee = msg.value - mintAmount; 
} else { 


messageFee = msg.value; 


_spendAllowance(_from, msg.sender, _amount); 
_transfer(_from, address(this), amount); 


return messageFee; 


function _creditTo(uintl16, address _toAddress, uint amount) internal override(OFT) 
returns(uint) { 

_burn(address(this), amount); 

(bool success, ) = _toAddress.call{value: amount}(""); 

require(success, "NativeOFT: failed to creditTo"); 


return _amount; 


receive() external payable { 


deposit(); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\oft\extension/PausableOFT.sol 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.0; 


import "../OFT.sol"; 


import "@openzeppelin/contracts/security/Pausable.sol"; 


// allow OFT to pause all cross-chain transactions 
contract PausableOFT is OFT, Pausable { 
constructor(string memory _name, string memory _symbol, address _|zEndpoint) 


OFT(_name, symbol, IzEndpoint) {} 


function _debitFrom(address from, uint16 dstChainld, bytes memory _toAddress, uint 
_amount) internal virtual override whenNotPaused returns(uint) { 


return super. debitFrom(_from, dstChainld, toAddress, amount); 


function pauseSendTokens(bool pause) external onlyOwner { 


pause ? pause() :_unpause(); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\oft\extension/ProxyOFT.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity “0.8.0; 


import "../OFTCore.sol"; 


import "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol"; 


contract ProxyOFT is OFTCore { 


using SafeERC20 for IERC20; 


IERC20 internal immutable innerToken; 


constructor(address |zEndpoint, address token) OFTCore(_IzEndpoint) { 


innerToken = IERC20(_token); 


function circulatingSupply() public view virtual override returns (uint) { 
unchecked { 


return innerToken.totalSupply() - innerToken.balanceOf(address(this)); 


function token() public view virtual override returns (address) { 


return address(innerToken); 


function debitFrom(address from, uint16, bytes memory, uint amount) internal virtual 
override returns(uint) { 
require(_ from == _msgSender(), "ProxyOFT: owner is not send caller"); 
uint before = innerToken.balanceOf(address(this)); 
innerloken.safeTransferFrom(_from, address(this), amount); 


return innerToken.balanceOf(address(this)) - before; 


function _creditTo(uintl6, address _toAddress, uint _amount) internal virtual override 
returns(uint) { 

uint before = innerToken.balanceOf(_toAddress); 

innerToken.safeTransfer(_toAddress, amount); 


return innerToken.balanceOf(_toAddress) - before; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\oft\v2/BaseOFTV2.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity “0.8.0; 


import "./OFTCoreV2.sol"; 
import "./IOFTV2.sol"; 


import "@openzeppelin/contracts/utils/introspection/ERC165.sol"; 


abstract contract BaseOFTV2 is OFTCoreV2, ERC165, IOFTV2 { 


constructor(uint8 _sharedDecimals, address |lzEndpoint) OFTCoreV2(_sharedDecimals, 


_IzEndpoint) { 
} 


[PRIA AAA AAA AAA AAA AAA AAA AAA AEA AAA AAA AAA AA AEA AAR ARAB AAR AAA AAA AAA 


* public functions 
Fkk kkk kkk kkk a KK / 
function sendFrom(address _from, uint16 dstChainld, bytes32 _toAddress, uint amount, 
LzCallParams calldata _callParams) public payable virtual override { 
_send(_from, _dstChainld, _toAddress, _amount, _callParams.refundAddress, 
_callParams.zroPaymentAddress, callParams.adapterParams); 


} 


function sendAndCall(address from, uint16 _dstChainld, bytes32 _toAddress, uint 


_amount, bytes calldata payload, uint64 dstGasForCall, LzCallParams calldata _callParams) 


public payable virtual override { 


_sendAndCall(_from, _dstChainld, _toAddress, _amount, payload, _dstGasForCall, 


_callParams.refundAddress, callParams.zroPaymentAddress, callParams.adapterParams); 


} 


[PRIA AAA AACA AAA AAA AAA AAA AA AAA AAA AAA AAA AAA AAR AAA AAA AAA AAA 
* public view functions 
a / 


function supportsinterface(bytes4 interfaceld) public view virtual override(ERC165, 


IERC165) returns (bool) { 


return interfaceld == type(IOFTV2).interfaceld || super.supportsInterface(interfaceld); 


function estimateSendFee(uintl6 _dstChainld, bytes32 toAddress, uint _amount, bool 
_useZro, bytes calldata adapterParams) public view virtual override returns (uint nativeFee, 


uint zroFee) { 


return estimateSendFee(_dstChainld, toAddress, amount, useZro, adapterParams); 


function estimateSendAndCallFee(uintl6 dstChainld, bytes32 toAddress, uint _amount, 
bytes calldata payload, uint64 —_dstGasForCall, bool _useZro, bytes calldata 
_adapterParams) public view virtual override returns (uint nativeFee, uint zroFee) { 
return _estimateSendAndCallFee(_dstChainld, _toAddress, _amount, _payload, 
_dstGasForCall, useZro, adapterParams); 


} 


function circulatingSupply() public view virtual override returns (uint); 


function token() public view virtual override returns (address); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\oft\v2/ICommonOFT.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity >=0.5.0; 


import "@openzeppelin/contracts/utils/introspection/IERC165.sol"; 


[** 
* @dev Interface of the IOFT core standard 
4 


interface I[CommonOFT is IERC165 { 


struct LzCallParams { 
address payable refundAddress; 
address zroPaymentAddress; 


bytes adapterParams; 


[** 

* @dev estimate send token © _tokenld* to (*_dstChainld’, ~_toAddress’ ) 

* dstChainld - LO defined chain id to send tokens too 

* toAddress - dynamic bytes array which contains the address to whom you are sending 
tokens to on the dstChain 

* amount - amount of the tokens to transfer 

* useZro - indicates to use zro to pay LO fees 


* adapterParam - flexible bytes array to indicate messaging adapter services in LO 


*/ 
function estimateSendFee(uint16 _dstChainld, bytes32 _toAddress, uint _amount, bool 


_useZro, bytes calldata _adapterParams) external view returns (uint nativeFee, uint zroFee); 


function estimateSendAndCallFee(uintl6 _dstChainld, bytes32 _toAddress, uint _ amount, 
bytes calldata _payload, uint64 _dstGasForCall, bool _useZro, bytes calldata 


_adapterParams) external view returns (uint nativeFee, uint zroFee); 


[** 
* @dev returns the circulating amount of tokens on current chain 
*/ 


function circulatingSupply() external view returns (uint); 


[** 
* @dev returns the address of the ERC20 token 
*/ 


function token() external view returns (address); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\oft\v2/IOFTReceiverV2.sol---- 


// SPDX-License-Identifier: BUSL-1.1 


pragma solidity >=0.5.0; 


interface IOFTReceivervV2 { 
[** 
* @dev Called by the OFT contract when tokens are received from source chain. 
* @param _srcChainld The chain id of the source chain. 
* @param __srcAddress The address of the OFT token contract on the source chain. 
* @param _nonce The nonce of the transaction on the source chain. 
* @param from The address of the account who calls the sendAndCall() on the source 
chain. 
* @param _amount The amount of tokens to transfer. 
* @param _payload Additional data with no specified format. 
*/ 
function onOFTReceived(uint16 _srcChainld, bytes calldata _srcAddress, uint64 _nonce, 
bytes32 from, uint amount, bytes calldata payload) external; 


} 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\oft\v2/IOFTV2.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity >=0.5.0; 


import "./ICommonOFT.sol"; 


[** 
* @dev Interface of the IOFT core standard 
4 


interface IOFTV2 is ICommonOFT { 


[** 

* @dev send ~_amount’ amount of token to (*_dstChainld*, *_toAddress*) from *_from* 
* ` from’ the owner of token 

* *_dstChainld* the destination chain identifier 

* ` toAddress can be any size depending on the “dstChainld°. 

* ` amount’ the quantity of tokens in wei 

* ` refundAddress` the address LayerZero refunds if too much message fee is sent 

* ` zroPaymentAddress` set to address(0x0) if not paying in ZRO (LayerZero Token) 

* ` adapterParams is a flexible bytes array to indicate messaging adapter services 

*/ 

function sendFrom(address _from, uint16 _dstChainld, bytes32 _toAddress, uint amount, 


LzCallParams calldata _callParams) external payable; 


function sendAndCall(address from, uint16 _dstChainld, bytes32 _toAddress, uint 


_amount, bytes calldata payload, uint64 dstGasForCall, LzCallParams calldata _callParams) 
external payable; 


} 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\oft\v2/OFTCoreV2.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity “0.8.0; 


import "../../../IZApp/NonblockingLzApp.sol"; 
import "../../../util/ExcessivelySafeCall.sol"; 
import "./I\CommonOFT.sol"; 


import "./LOFTReceiverV2.sol"; 


abstract contract OFTCoreV2 is NonblockingLzApp { 
using BytesLib for bytes; 


using ExcessivelySafeCall for address; 


uint public constant NO_EXTRA_GAS = 0; 


// packet type 


uint8 public constant PT_SEND = 0; 


uint8 public constant PT_ SEND_AND CALL = 1; 


uint8 public immutable sharedDecimals; 


bool public useCustomAdapterParams; 


Mapping(uintl6 => mapping(bytes => mapping(uint64 => bool))) public 


creditedPackets; 


[** 

* @dev Emitted when `_amount` tokens are moved from the `_sender` to (*_dstChainld°, 
` toAddress`) 

* ` nonce’ is the outbound nonce 

*/ 

event SendToChain(uint16 indexed _dstChainld, address indexed _from, bytes32 indexed 


_toAddress, uint _amount); 


[** 
* @dev Emitted when `_amount` tokens are received from *_srcChainld* into the 
` _toAddress` on the local chain. 
* ` nonce’ is the inbound nonce. 
*/ 


event ReceiveFromChain(uint16 indexed _srcChainld, address indexed _to, uint amount); 


event SetUseCustomAdapterParams(bool _useCustomAdapterParams); 


event CallOFTReceivedSuccess(uintl6 indexed _srcChainld, bytes _srcAddress, uint64 


_nonce, bytes32 _hash); 


event NonContractAddress(address _address); 


// sharedDecimals should be the minimum decimals on all chains 


constructor(uint8 _sharedDecimals, address _lzEndpoint) NonblockingLzApp(_IzEndpoint) 


sharedDecimals = _sharedDecimals; 


[PRIA AAA AAA AAA AAA AAA AAA AAA AAA AAR AAA AAA AAA AAA AEA 


* public functions 


a / 
function callOnOFTReceived(uintl6 —srcChainld, bytes calldata _srcAddress, uint64 
_nonce, bytes32 from, address to, uint amount, bytes calldata_ payload, uint _gasForCall) 


public virtual { 


require(_msgSender() == address(this), "OFTCore: caller must be OFTCore"); 


// send 
_amount = _transferFrom(address(this), to, amount); 


emit ReceiveFromChain(_srcChainld, to, amount); 


// call 
lIOFTReceiverV2(_to).onOFTReceived{gas: _gasForCall}(_srcChainld, _srcAddress, 


_nonce, from, amount, payload); 


} 


function setUseCustomAdapterParams(bool _useCustomAdapterParams) public virtual 


onlyOwner { 
useCustomAdapterParams = _useCustomAdapterParams; 


emit SetUseCustomAdapterParams(_useCustomAdapterParams); 


[PRIA AAA AAA AAA AAA AAA AA AA AAA AAA AA AEA AAA EAE AAA AAA AAA AAA 


* internal functions 
Fkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kk kkk kkk kkk kkk kkk kK / 
function _estimateSendFee(uint16 _dstChainld, bytes32 _toAddress, uint _amount, bool 
_useZro, bytes memory _adapterParams) internal view virtual returns (uint nativeFee, uint 
zroFee) { 
// mock the payload for sendFrom() 
bytes memory payload = _encodeSendPayload(_toAddress, ld2sd(_amount)); 
return IzEndpoint.estimateFees(_dstChainld, address(this), payload, _useZro, 
_adapterParams); 


} 


function _estimateSendAndCallFee(uint16 dstChainld, bytes32 toAddress, uint amount, 
bytes memory payload, uint64 —_dstGasForCall, bool _useZro, bytes memory 
_adapterParams) internal view virtual returns (uint nativeFee, uint zroFee) { 
// mock the payload for sendAndCall() 
bytes memory payload = _encodeSendAndCallPayload(msg.sender, _toAddress, 
_Ild2sd(_amount), payload, dstGasForCall); 
return IzEndpoint.estimateFees(_dstChainld, address(this), payload, _useZro, 
_adapterParams); 


} 


function _nonblockingLzReceive(uintl6 _srcChainld, bytes memory _srcAddress, uint64 


_nonce, bytes memory _payload) internal virtual override { 


uint8 packetType = _payload.toUint8(0); 


if (packetType == PT_SEND) { 


_sendAck(_srcChainld, srcAddress, nonce, payload); 
} else if (packetType == PT SEND AND CALL) { 
_sendAndCallAck(_srcChainld, srcAddress, nonce, payload); 
} else { 


revert("OFTCore: unknown packet type"); 


function send(address from, uintl16 _dstChainld, bytes32 _toAddress, uint _amount, 
address payable _refundAddress, address —_zroPaymentAddress, bytes memory 
_adapterParams) internal virtual returns (uint amount) { 


_checkAdapterParams(_dstChainld, PT_ SEND, adapterParams, NO_EXTRA GAS); 


(amount,) = _removeDust(_amount); 
amount = debitFrom(_from, _dstChainld, toAddress, amount); // amount returned 
should not have dust 


require(amount > 0, "OFTCore: amount too small"); 


bytes memory IzPayload = _encodeSendPayload(_toAddress, Id2sd(amount)); 


_IzSend(_dstChainld, IzPayload, refundAddress, zroPaymentAddress, adapterParams, 


msg.value); 


emit SendToChain(_dstChainld, from, toAddress, amount); 


function sendAck(uint16 srcChainld, bytes memory, uint64, bytes memory _payload) 


internal virtual { 
(address to, uint64 amountSD) = _decodeSendPayload(_payload); 
if (to == address(0)) { 


to = address(Oxdead); 


uint amount = _sd2ld(amountSD); 


amount = _creditTo(_srcChainld, to, amount); 


emit ReceiveFromChain(_srcChainld, to, amount); 


function _sendAndCall(address from, uintl6 _dstChainld, bytes32 _toAddress, uint 
_amount, bytes memory _payload, uint64 dstGasForCall, address payable _refundAddress, 
address _zroPaymentAddress, bytes memory _adapterParams) internal virtual returns (uint 
amount) { 
_checkAdapterParams(_dstChainld, PT_SEND_ AND CALL, _adapterParams, 


_dstGasForCall); 


(amount,) = _removeDust(_amount); 
amount = _debitFrom(_from, dstChainld, toAddress, amount); 


require(amount > 0, "OFTCore: amount too small"); 


// encode the msg.sender into the payload instead of from 
bytes memory IzPayload = _encodeSendAndCallPayload(msg.sender, _toAddress, 


_Ild2sd(amount), payload, dstGasForCall); 


_IzSend(_dstChainld, IzPayload, refundAddress, zroPaymentAddress, adapterParams, 


msg.value); 


emit SendToChain(_dstChainld, from, toAddress, amount); 


function sendAndCallAck(uint16 srcChainld, bytes memory _srcAddress, uint64 _nonce, 
bytes memory _payload) internal virtual { 
(bytes32 from, address to, uint64 amountSD, bytes memory payloadForCall, uint64 


gasForCall) = _decodeSendAndCallPayload(_payload); 


bool credited = creditedPackets[_srcChainld][_srcAddress][_nonce]; 


uint amount = _sd2ld(amountSD); 


// credit to this contract first, and then transfer to receiver only if callOnOFTReceived() 
succeeds 
if ('credited) { 
amount = _creditTo(_srcChainld, address(this), amount); 


creditedPackets[_srcChainld][_srcAddress][_nonce] = true; 


if (!_isContract(to)) { 
emit NonContractAddress(to); 


return; 


// workaround for stack too deep 

uint16 srcChainld = _srcChainld; 

bytes memory srcAddress = _srcAddress; 
uint64 nonce = _nonce; 

bytes memory payload = _payload; 
bytes32 from_ = from; 

address to_ = to; 

uint amount_ = amount; 


bytes memory payloadForCall_ = payloadForCall; 


// no gas limit for the call if retry 
uint gas = credited ? gasleft() : gasForCall; 
(bool success, bytes memory reason) = address(this).excessivelySafeCall(gasleft(), 
150, abi.encodeWithSelector(this.callOonOFTReceived.selector, srcChainld, srcAddress, 


nonce, from_, to_, amount_, payloadForCall_, gas)); 


if (success) { 

bytes32 hash = keccak256(payload); 

emit CallOFTReceivedSuccess(srcChainld, srcAddress, nonce, hash); 
} else { 

// store the failed message into the nonblockingLzApp 


_storeFailedMessage(srcChainld, srcAddress, nonce, payload, reason); 


function isContract(address account) internal view returns (bool) { 


return _account.code.length > 0; 


function _checkAdapterParams(uintl6 _dstChainld, uintl6 _pkType, bytes memory 
_adapterParams, uint _extraGas) internal virtual { 
if (useCustomAdapterParams) { 
_checkGasLimit(_dstChainld, pkType, adapterParams, _extraGas); 
} else { 


require(_adapterParams.length == 0, "OFTCore: _adapterParams must be empty."); 


function ld2sd(uint amount) internal virtual view returns (uint64) { 
uint amountSD = _amount/ _Id2sdRate(); 
require(amountSD <= type(uint64).max, "OFTCore: amountSD overflow"); 


return uint64(amountSD); 


function sd2Id(uint64 _amountSD) internal virtual view returns (uint) { 


return _amountSD * _Id2sdRate(); 


function removeDust(uint _amount) internal virtual view returns (uint amountAfter, uint 
dust) { 
dust = amount % _Id2sdRate(); 


amountAfter = _amount - dust; 


function _encodeSendPayload(bytes32 _toAddress, uint64 _amountSD) internal virtual 
view returns (bytes memory) { 


return abi.encodePacked(PT SEND, toAddress, amountSD); 


function _decodeSendPayload(bytes memory _payload) internal virtual view returns 
(address to, uint64 amountSD) { 
require(_payload.toUint8(0) == PT_SEND && _payload.length == 41, "OFTCore: invalid 


payload"); 


to = _payload.toAddress(13); // drop the first 12 bytes of bytes32 


amountSD = _payload.toUint64(33); 


function _encodeSendAndCallPayload(address from, bytes32 _toAddress, uint64 
_amountSD, bytes memory _payload, uint64 _dstGasForCall) internal virtual view returns 
(bytes memory) { 

return abi.encodePacked( 

PT_SEND_AND CALL, 

_toAddress, 

_amountSD, 

_addressToBytes32(_from), 

_dstGasForCall, 


_payload 


function _decodeSendAndCallPayload(bytes memory _payload) internal virtual view 
returns (bytes32 from, address to, uint64 amountSD, bytes memory payload, uint64 
dstGasForCall) { 


require(_payload.toUint8(0) == PT SEND AND CALL, "OFTCore: invalid payload"); 


to = _payload.toAddress(13); // drop the first 12 bytes of bytes32 
amountSD = _payload.toUint64(33); 

from = _payload.toBytes32(41); 

dstGasForCall = _payload.toUint64(73); 


payload = _payload.slice(81, payload.length - 81); 


function addressToBytes32(address _address) internal pure virtual returns (bytes32) { 


return bytes32(uint(uint160(_address))); 


function _debitFrom(address from, uintl6 _dstChainld, bytes32 _toAddress, uint 


_amount) internal virtual returns (uint); 


function _creditTo(uint16 srcChainld, address toAddress, uint amount) internal virtual 


returns (uint); 


function transferFrom(address from, address to, uint _amount) internal virtual returns 


(uint); 


function ld2sdRate() internal view virtual returns (uint); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\oft\v2/OFTV2.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity “0.8.0; 


import "@openzeppelin/contracts/token/ERC20/ERC20.sol"; 


import "./BaseOFTV2.sol"; 


contract OFTV2 is BaseOFTV2, ERC20 { 


uint internal immutable Id2sdRate; 


constructor(string memory _name, string memory _symbol, uint8 _sharedDecimals, 
address _|zEndpoint) ERC20(_name, symbol) BaseOFTV2(_sharedDecimals, |zEndpoint) { 

uint8 decimals = decimals(); 

require(_sharedDecimals <= decimals, "OFT: sharedDecimals must be <= decimals"); 


Id2sdRate = 10 ** (decimals - sharedDecimals); 


[PRIA AAA AAA KK AAA AAA AAA AAA AAA AAA AAA AEA AREA AAA A AAA AA AAA A 


* public functions 
Fkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk / 
function circulatingSupply() public view virtual override returns (uint) { 


return totalSupply(); 


function token() public view virtual override returns (address) { 


return address(this); 


[PRR AAA AAA AAA AAA AAA AAA AAA KKK AAA AAA AAA AAA AAA AAA AAA AAA AAA 


* internal functions 
Fk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kk kkk kkk kkk kkk kkk kkk kK / 
function _debitFrom(address from, uint16, bytes32, uint _amount) internal virtual 
override returns (uint) { 
address spender = _msgSender(); 
if (_ from != spender) spendAllowance(_from, spender, amount); 
_burn(_from, _amount); 


return amount; 


function _creditTo(uintl6, address _toAddress, uint _amount) internal virtual override 
returns (uint) { 
_mint(_toAddress, amount); 


return _amount; 


function _transferFrom(address from, address to, uint amount) internal virtual override 
returns (uint) { 
address spender = _msgSender(); 
// if transfer from this contract, no need to check allowance 


if (from != address(this) && from != spender) _spendAllowance(_from, spender, 


_amount); 
_transfer(_from, to, amount); 


return _amount; 


function ld2sdRate() internal view virtual override returns (uint) { 


return Id2sdRate; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\oft\v2/ProxyOFTV2.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.0; 


import "./BaseOFTV2.sol"; 


import "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol"; 


contract ProxyOFTV2 is BaseOFTV2 { 


using SafeERC20 for IERC20; 


IERC20 internal immutable innerToken; 


uint internal immutable Id2sdRate; 


// total amount is transferred from this chain to other chains, ensuring the total is less 


than uint64.max in sd 


uint public outboundAmount; 


constructor(address token, uint8 _sharedDecimals, address _1|zEndpoint) 
BaseOFTV2(_sharedDecimals, IzEndpoint) { 


innerToken = IERC20(_token); 


(bool success, bytes memory data) = _token.staticcall( 
abi.encodeWithSignature("decimals()") 
); 


require(success, "ProxyOFT: failed to get token decimals"); 


uint8 decimals = abi.decode(data, (uint8)); 


require(_sharedDecimals <= decimals, "ProxyOFT: sharedDecimals must be <= 
decimals"); 


Id2sdRate = 10 ** (decimals - sharedDecimals); 


[PRR AAA AAA AAA AAA AAA AAA AAA AAA AEA AAA AAA AAA AAA AAA AAR AAA AAA AAR 


* public functions 


FKK kkk kkk kkk kkk kkk kkk KKK kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk / 


function circulatingSupply() public view virtual override returns (uint) { 


return innerToken.totalSupply() - outboundAmount; 


function token() public view virtual override returns (address) { 


return address(innerToken); 


[AAAA AKAA AAK KKK KK KKK KKK KKK AA AAA AAA AEA AA AAA AERA AAR AAA AAA AAA AAA AA 


* internal functions 


a / 


function _debitFrom(address from, uint16, bytes32, uint _amount) internal virtual 
override returns (uint) { 


require(_from == _msgSender(), "ProxyOFT: owner is not send caller"); 


_amount = _transferFrom(_from, address(this), amount); 


// _amount still may have dust if the token has transfer fee, then give the dust back to 


the sender 


(uint amount, uint dust) = _removeDust(_amount); 


if (dust > 0) innerToken.safeTransfer(_from, dust); 


// check total outbound amount 
outboundAmount += amount; 
uint cap = _sd2Id(type(uint64).max); 


require(cap >= outboundAmount, "ProxyOFT: outboundAmount overflow"); 


return amount; 


function _creditTo(uintl6, address _toAddress, uint _amount) internal virtual override 


returns (uint) { 


outboundAmount -= _amount; 


// tokens are already in this contract, so no need to transfer 
if ( toAddress == address(this)) { 


return _amount; 


return _transferFrom(address(this), toAddress, amount); 


function transferFrom(address from, address to, uint amount) internal virtual override 
returns (uint) { 
uint before = innerToken.balanceOf(_to); 
if (from == address(this)) { 
innerToken.safeTransfer(_to, amount); 
} else { 
innerToken.safeTransferFrom(_from, to, amount); 
} 


return innerToken.balanceOf(_to) - before; 


function ld2sdRate() internal view virtual override returns (uint) { 


return Id2sdRate; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\oft\v2\fee/BaseOFTWithFee.so 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.0; 


import "../OFTCoreV2.sol"; 
import "./LOFTWithFee.sol"; 
import "./Fee.sol"; 


import "@openzeppelin/contracts/utils/introspection/ERC165.sol"; 


abstract contract BaseOFTWithFee is OFTCoreV2, Fee, ERC165, lIOFTWithFee { 


constructor(uint8 _sharedDecimals, address |lzEndpoint) OFTCoreV2(_sharedDecimals, 
_IzEndpoint) { 


} 


[PRR AAA AAA AAA AAA AAA AAA AAA AAA AAA AAA AAA A A AAA AA AAA AAA 


* public functions 
Fk kkk kkk kk kkk kkk kkk k kkk K kkk kkk kkk kkk kk kkk kkk kkk kk kkk kkk kkk kkk kkk KK / 
function sendFrom(address from, uint16 dstChainld, bytes32 _toAddress, uint amount, 
uint minAmount, LzCallParams calldata _callParams) public payable virtual override { 
(_amount,) = _payOFTFee(_from, dstChainld, amount); 
_amount = _send(_from, dstChainld, toAddress, amount, callParams.refundAddress, 
_callParams.zroPaymentAddress, callParams.adapterParams); 


require(_amount >= _minAmount, "BaseOFTWithFee: amount is less than 


minAmount"); 


} 


function sendAndCall(address from, uint16 _dstChainld, bytes32 _toAddress, uint 
_amount, uint _minAmount, bytes calldata payload, uint64 _dstGasForCall, LzCallParams 
calldata_callParams) public payable virtual override { 

(_amount,) = _payOFTFee(_from, dstChainld, amount); 

_amount = _sendAndCall(_from, _dstChainld, _toAddress, _amount, _payload, 
_dstGasForCall, _callParams.refundAddress, _callParams.zroPaymentAddress, 
_callParams.adapterParams); 

require(_amount >= _minAmount, "BaseOFTWithFee: amount is less than 
minAmount"); 


} 


[PRIA AAA AAA AAA AAA AAA AAA AAA AAA AAA AEA AAA AAA AAA AREA AAA ABA AA AAA 


* public view functions 


a / 


function supportsinterface(bytes4 interfaceld) public view virtual override(ERC165, 


IERC165) returns (bool) { 
type(IOFTWithFee).interfaceld || 


return interfaceld 
super.supportsIinterface(interfaceld); 


} 


function estimateSendFee(uintl6 _dstChainld, bytes32 toAddress, uint _amount, bool 
_useZro, bytes calldata adapterParams) public view virtual override returns (uint nativeFee, 


uint zroFee) { 


return _estimateSendFee(_dstChainld, toAddress, amount, useZro, adapterParams); 


function estimateSendAndCallFee(uintl6 _dstChainld, bytes32 toAddress, uint _amount, 
bytes calldata payload, uint64 _dstGasForCall, bool _useZro, bytes calldata 
_adapterParams) public view virtual override returns (uint nativeFee, uint zroFee) { 
return _estimateSendAndCallFee(_dstChainld, _toAddress, _amount, _payload, 
_dstGasForCall, useZro, adapterParams); 


} 


function circulatingSupply() public view virtual override returns (uint); 


function token() public view virtual override returns (address); 


function transferFrom(address from, address to, uint amount) internal virtual override 


(Fee, OFTCoreV2) returns (uint); 


} 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\oft\v2\fee/Fee.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity “0.8.0; 


import "@openzeppelin/contracts/access/Ownable.sol"; 


abstract contract Fee is Ownable { 


uint public constant BP_DENOMINATOR = 10000; 


mapping(uintl6 => FeeConfig) public chainldToFeeBps; 
uint16 public defaultFeeBp; 


address public feeOwner; // defaults to owner 


struct FeeConfig { 
uint16 feeBP; 


bool enabled; 


event SetFeeBp(uint16 dstchainld, bool enabled, uint16 feeBp); 
event SetDefaultFeeBp(uint16 feeBp); 


event SetFeeOwner(address feeOwner); 


constructor() { 


feeOwner = owner(); 


function setDefaultFeeBp(uint16 feeBp) public virtual onlyOwner { 
require( feeBp <= BP_DENOMINATOR, "Fee: fee bp must be <= BP_DENOMINATOR"); 
defaultFeeBp = _feeBp; 


emit SetDefaultFeeBp(defaultFeeBp); 


function setFeeBp(uintl6 _dstChainld, bool enabled, uint16 _feeBp) public virtual 
onlyOwner { 

require(_feeBp <= BP_DENOMINATOR, "Fee: fee bp must be <= BP_DENOMINATOR'"); 

chainldToFeeBps[_dstChainld] = FeeConfig(_feeBp, enabled); 


emit SetFeeBp(_dstChainld, enabled, feeBp); 


function setFeeOwner(address feeOwner) public virtual onlyOwner { 
require(_feeOwner != address(0x0), "Fee: feeOwner cannot be 0x"); 
feeOwner = _feeOwner; 


emit SetFeeOwner(_feeOwner); 


function quoteOFTFee(uintl6 dstChainld, uint amount) public virtual view returns (uint 
fee) { 
FeeConfig memory config = chainldToFeeBps[_dstChainld]; 
if (config.enabled) { 
fee = amount * config.feeBP / BP_DENOMINATOR; 


} else if (defaultFeeBp > 0) { 


fee = amount * defaultFeeBp / BP_DENOMINATOR; 
} else { 


fee = 0; 


function _payOFTFee(address from, uint16 _dstChainld, uint amount) internal virtual 
returns (uint amount, uint fee) { 
fee = quoteOFTFee(_dstChainld, amount); 
amount = _amount - fee; 
if (fee > 0) { 


_transferFrom(_from, feeOwner, fee); 


function transferFrom(address from, address to, uint amount) internal virtual returns 
(uint); 


} 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\oft\v2\fee/IOFTWithFee.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity >=0.5.0; 


import "../I\CommonOFT.sol"; 


[** 
* @dev Interface of the IOFT core standard 
4 


interface IOFTWithFee is ICcommonOFT { 


[** 

* @dev send *_amount’ amount of token to (*_dstChainld*, *_toAddress*) from *_from* 
* ` from’ the owner of token 

* *_dstChainld* the destination chain identifier 

* ` toAddress can be any size depending on the “dstChainld°. 

* ` amount’ the quantity of tokens in wei 

* ` minAmount’ the minimum amount of tokens to receive on dstChain 

* ` refundAddress` the address LayerZero refunds if too much message fee is sent 

* ` _zroPaymentAddress’ set to address(0x0) if not paying in ZRO (LayerZero Token) 

* ` adapterParams is a flexible bytes array to indicate messaging adapter services 

*/ 

function sendFrom(address _from, uint16 dstChainld, bytes32 _toAddress, uint amount, 


uint _minAmount, LzCallParams calldata _callParams) external payable; 


function sendAndCall(address from, uint16 _dstChainld, bytes32 _toAddress, uint 
_amount, uint _minAmount, bytes calldata payload, uint64 _dstGasForCall, LzCallParams 
calldata_callParams) external payable; 


} 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\oft\v2\fee/OFTWithFee.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity “0.8.0; 


import "@openzeppelin/contracts/token/ERC20/ERC20.sol"; 


import "./BaseOFTWithFee.sol"; 


contract OFTWithFee is BaseOFTWithFee, ERC20 { 


uint internal immutable Id2sdRate; 


constructor(string memory _name, string memory _symbol, uint8 _sharedDecimals, 
address _|zEndpoint) ERC20(_name, symbol) BaseOFTWithFee(_sharedDecimals, 
_IzEndpoint) { 
uint8 decimals = decimals(); 
require(_sharedDecimals <= decimals, "OFTWithFee: sharedDecimals must be <= 
decimals"); 


Id2sdRate = 10 ** (decimals - _sharedDecimals); 


[PRIA AAA AAA AAA AAA AAA kkk AAA AR 


* public functions 
Fkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kK / 
function circulatingSupply() public view virtual override returns (uint) { 


return totalSupply(); 


function token() public view virtual override returns (address) { 


return address(this); 


[PRAIRIE AAA AAA AAA AAA AAA AAA AAA AAA AAA A A AAA AAA 


* internal functions 


a / 


function _debitFrom(address from, uint16, bytes32, uint _amount) internal virtual 
override returns (uint) { 

address spender = _msgSender(); 

if (_ from != spender) spendAllowance(_from, spender, amount); 

_burn(_from, _amount); 


return amount; 


function _creditTo(uintl16, address _toAddress, uint _amount) internal virtual override 
returns (uint) { 
_mint(_toAddress, amount); 


return _amount; 


function _transferFrom(address from, address to, uint amount) internal virtual override 
returns (uint) { 


address spender = _msgSender(); 


// if transfer from this contract, no need to check allowance 
if (from != address(this) && from != spender) _spendAllowance(_from, spender, 
_amount); 
_transfer(_from, to, amount); 


return _amount; 


function ld2sdRate() internal view virtual override returns (uint) { 


return Id2sdRate; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\oft\v2\fee/ProxyOFTWithFee.s 
ol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.0; 


import "./BaseOFTWithFee.sol"; 


import "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol"; 


contract ProxyOFTWithFee is BaseOFTWithFee { 


using SafeERC20 for IERC20; 


IERC20 internal immutable innerToken; 


uint internal immutable Id2sdRate; 


// total amount is transferred from this chain to other chains, ensuring the total is less 
than uint64.max in sd 


uint public outboundAmount; 


constructor(address token, uint8 —sharedDecimals, address _1|zEndpoint) 
BaseOFTWithFee(_sharedDecimals, |IzEndpoint) { 


innerloken = IERC20(_token); 


(bool success, bytes memory data) = _token.staticcall( 


abi.encodeWithSignature("decimals()") 


require(Ssuccess, "ProxyOFTWithFee: failed to get token decimals"); 


uint8 decimals = abi.decode(data, (uint8)); 


require(_sharedDecimals <= decimals, "ProxyOFTWithFee: sharedDecimals must be 
<= decimals"); 


Id2sdRate = 10 ** (decimals - _sharedDecimals); 


[EAA AAKA AKAAKA AA AAA AAA KKK AAA AAA AEA AAA AAA ARAB AAA AAA AR 


* public functions 


a / 


function circulatingSupply() public view virtual override returns (uint) { 


return innerToken.totalSupply() - outboundAmount; 


function token() public view virtual override returns (address) { 


return address(innerToken); 


[PRIA AAA AAA AAA AAA AAA AAA AAA AAA AAA AAA AAA AAA AAA AAA ARAB AA AA AAA 


* internal functions 
Fk kkk kkk kk kkk kkk kkk kkk kkk kk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk kkk / 
function _debitFrom(address from, uint16, bytes32, uint _amount) internal virtual 
override returns (uint) { 


require(_from == _msgSender(), "ProxyOFTWithFee: owner is not send caller"); 


_amount = _transferFrom(_from, address(this), amount); 


// _amount still may have dust if the token has transfer fee, then give the dust back to 


the sender 


(uint amount, uint dust) = _removeDust(_amount); 


if (dust > 0) innerToken.safeTransfer(_from, dust); 


// check total outbound amount 
outboundAmount += amount; 
uint cap = _sd2Id(type(uint64).max); 


require(cap >= outboundAmount, "ProxyOFTWithFee: outboundAmount overflow"); 


return amount; 


function _creditTo(uintl6, address _toAddress, uint _amount) internal virtual override 


returns (uint) { 


outboundAmount -= _amount; 


// tokens are already in this contract, so no need to transfer 
if (_ toAddress == address(this)) { 


return _amount; 


return _transferFrom(address(this), toAddress, amount); 


function _transferFrom(address from, address to, uint amount) internal virtual override 
returns (uint) { 
uint before = innerToken.balanceOf(_to); 
if (from == address(this)) { 
innerToken.safeTransfer(_to, amount); 
} else { 
innerToken.safeTransferFrom(_from, to, amount); 
} 


return innerToken.balanceOf(_to) - before; 


function ld2sdRate() internal view virtual override returns (uint) { 


return Id2sdRate; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\onft/IONFT1155.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity >=0.5.0; 


import "./IONFT1155Core.sol"; 


import "@openzeppelin/contracts/token/ERC1155/IERC1155.sol"; 


[** 
* @dev Interface of the ONFT standard 
i 


interface IONFT1155 is IONFT1155Core, IERC1155 { 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\onft/IONFT1155Core.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity >=0.5.0; 


import "@openzeppelin/contracts/utils/introspection/IERC165.sol"; 


[** 
* @dev Interface of the ONFT Core standard 
i 
interface IONFT1155Core is IERC165 { 
event SendToChain(uint16 indexed _dstChainld, address indexed from, bytes indexed 
_toAddress, uint tokenld, uint amount); 
event SendBatchToChain(uintl6 indexed _dstChainld, address indexed from, bytes 
indexed toAddress, uint[] tokenlds, uint[] amounts); 
event ReceiveFromChain(uint16 indexed _srcChainld, bytes indexed _srcAddress, address 
indexed _toAddress, uint tokenld, uint amount); 
event ReceiveBatchFromChain(uintl16 indexed _srcChainld, bytes indexed _srcAddress, 


address indexed _toAddress, uint[] tokenlds, uint[] amounts); 


// from - address where tokens should be deducted from on behalf of 

// _dstChainld - LO defined chain id to send tokens too 

// toAddress - dynamic bytes array which contains the address to whom you are sending 
tokens to on the dstChain 

// tokenld - token Id to transfer 


// amount - amount of the tokens to transfer 


// _refundAddress - address on src that will receive refund for any overpayment of LO fees 
// _zroPaymentAddress - if paying in zro, pass the address to use. using 0x0 indicates not 
paying fees in zro 
// -adapterParams - flexible bytes array to indicate messaging adapter services in LO 
function sendFrom(address from, uintl6 _dstChainld, bytes calldata toAddress, uint 
_tokenld, uint _amount, address payable _refundAddress, address _zroPaymentAddress, 


bytes calldata adapterParams) external payable; 


// from - address where tokens should be deducted from on behalf of 


// _dstChainld - LO defined chain id to send tokens too 


// toAddress - dynamic bytes array which contains the address to whom you are sending 


tokens to on the dstChain 

// tokenlds - token Ids to transfer 

// amounts - amounts of the tokens to transfer 

// _refundAddress - address on src that will receive refund for any overpayment of LO fees 

// _zroPaymentAddress - if paying in zro, pass the address to use. using 0x0 indicates not 
paying fees in zro 

// -adapterParams - flexible bytes array to indicate messaging adapter services in LO 

function sendBatchFrom(address from, uint16 _dstChainld, bytes calldata _toAddress, 

uint[] calldata tokenlds, uint[] calldata amounts, address payable _refundAddress, address 


_zroPaymentAddress, bytes calldata adapterParams) external payable; 


// _dstChainld - LO defined chain id to send tokens too 


// toAddress - dynamic bytes array which contains the address to whom you are sending 


tokens to on the dstChain 


// tokenld - token Id to transfer 


// amount - amount of the tokens to transfer 
// _useZro - indicates to use zro to pay LO fees 
// -adapterParams - flexible bytes array to indicate messaging adapter services in LO 
function estimateSendFee(uint16 _dstChainld, bytes calldata toAddress, uint _tokenld, 
uint _amount, bool _useZro, bytes calldata _adapterParams) external view returns (uint 


nativeFee, uint zroFee); 


// _dstChainld - LO defined chain id to send tokens too 

// toAddress - dynamic bytes array which contains the address to whom you are sending 
tokens to on the dstChain 

// tokenlds - tokens Id to transfer 

// amounts - amounts of the tokens to transfer 

// _useZro - indicates to use zro to pay LO fees 

// -adapterParams - flexible bytes array to indicate messaging adapter services in LO 

function estimateSendBatchFee(uintl16 _dstChainld, bytes calldata _toAddress, uint[] 

calldata tokenlds, uint[] calldata amounts, bool useZro, bytes calldata _adapterParams) 
external view returns (uint nativeFee, uint zroFee); 


} 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\onft/IONFT 721.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity >=0.5.0; 


import "./IONFT721Core.sol"; 


import "@openzeppelin/contracts/token/ERC721/IERC721.sol"; 


[** 
* @dev Interface of the ONFT standard 
i 


interface IONFT721 is IONFT721Core, IERC721 { 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\onft/IONFT721Core.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity >=0.5.0; 


import "@openzeppelin/contracts/utils/introspection/IERC165.sol"; 


[** 
* @dev Interface of the ONFT Core standard 
i 
interface IONFT721Core is IERC165 { 
[** 
* @dev Emitted when *_tokenlds[]’ are moved from the `_sender` to (`_dstChainld`, 
` toAddress`) 
* ` nonce’ is the outbound nonce from 
*/ 
event SendToChain(uint16 indexed _dstChainld, address indexed from, bytes indexed 
_toAddress, uint[] _tokenlds); 
event ReceiveFromChain(uint16 indexed _srcChainld, bytes indexed _srcAddress, address 


indexed _toAddress, uint[] tokenlds); 


[** 
* @dev Emitted when `_payload` was received from Iz, but not enough gas to deliver all 
tokenlds 


event CreditStored(bytes32 hashedPayload, bytes payload); 


[** 
* @dev Emitted when ~_hashedPayload* has been completely delivered 
*/ 


event CreditCleared(bytes32 _hashedPayload); 


[** 
* @dev send token `_tokenlid` to (`_dstChainid`, `_toAddress`) from `_from` 
* ` toAddress` can be any size depending on the `dstChainld`. 
* ` zroPaymentAddress` set to address(0x0) if not paying in ZRO (LayerZero Token) 
* ` adapterParams` is a flexible bytes array to indicate messaging adapter services 
*/ 
function sendFrom(address from, uint16 _dstChainld, bytes calldata _toAddress, uint 
_tokenld, address payable _refundAddress, address _zroPaymentAddress, bytes calldata 
_adapterParams) external payable; 
[** 
* @dev send tokens *_tokenlds[]° to ("_dstChainld’, `_toAddress`) from *_from* 
* ` toAddress can be any size depending on the “dstChainld°. 
* ` zroPaymentAddress` set to address(0x0) if not paying in ZRO (LayerZero Token) 
* ` adapterParams is a flexible bytes array to indicate messaging adapter services 
ay. 
function sendBatchFrom(address from, uint16 _dstChainld, bytes calldata _toAddress, 
uint[] calldata _tokenlds, address payable _refundAddress, address _zroPaymentAddress, 


bytes calldata_adapterParams) external payable; 


[** 


* @dev estimate send token ©_tokenld* to (*_dstChainld’, ~_toAddress’ ) 


* dstChainld - LO defined chain id to send tokens too 
* toAddress - dynamic bytes array which contains the address to whom you are sending 
tokens to on the dstChain 
* tokenld - token Id to transfer 
* useZro - indicates to use zro to pay LO fees 
* adapterParams - flexible bytes array to indicate messaging adapter services in LO 
my, 
function estimateSendFee(uint16 _dstChainld, bytes calldata toAddress, uint _tokenld, 
bool _useZro, bytes calldata _adapterParams) external view returns (uint nativeFee, uint 
zroFee); 
[** 
* @dev estimate send token ©_tokenld* to (~_dstChainld’, ~_toAddress’ ) 
* dstChainld - LO defined chain id to send tokens too 
* toAddress - dynamic bytes array which contains the address to whom you are sending 
tokens to on the dstChain 
* tokenlds[] - token Ids to transfer 
* useZro - indicates to use zro to pay LO fees 
* adapterParams - flexible bytes array to indicate messaging adapter services in LO 
*/ 
function estimateSendBatchFee(uint16 _dstChainld, bytes calldata _toAddress, uint[] 
calldata tokenlds, bool useZro, bytes calldata _adapterParams) external view returns (uint 
nativeFee, uint zroFee); 


} 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\onft/ONFT1155.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity “0.8.0; 


import "./IONFT1155.sol"; 
import "./ONFT1155Core.sol"; 


import "@openzeppelin/contracts/token/ERC1155/ERC1155.sol"; 


// NOTE: this ONFT contract has no public minting logic. 
// must implement your own minting logic in child classes 
contract ONFT1155 is ONFT1155Core, ERC1155, IONFT1155 { 
constructor(string memory  _uri, address [zEndpoint) ERC1155(_uri) 


ONFT1155Core(_IzEndpoint) {} 


function supportsinterface(bytes4 interfaceld) public view virtual override(ONFT1155Core, 
ERC1155, IERC165) returns (bool) { 
return interfaceld ==  type(IONFT1155).interfaceld || 
super.supportsInterface(interfaceld); 


} 


function _debitFrom(address from, uintl6, bytes memory, uint[] memory _tokenlds, 
uint[] memory _amounts) internal virtual override { 
address spender = _msgSender(); 
require(spender == from || isApprovedForAll(_from, spender), "ONFT1155: send caller 


is not owner nor approved"); 


_burnBatch(_from, tokenlds, amounts); 


function _creditTo(uintl6, address toAddress, uint[] memory _tokenlds, uint[] memory 
_amounts) internal virtual override { 


_mintBatch(_toAddress, tokenlds, amounts, ""); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\onft/ONFT1155Core.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity “0.8.0; 


import "./LONFT1155Core.sol"; 
import "../../IZApp/NonblockingLzApp.sol"; 


import "@openzeppelin/contracts/utils/introspection/ERC165.sol"; 


abstract contract ONFT1155Core is NonblockingLzApp, ERC165, IONFT1155Core { 
uint public constant NO_EXTRA_GAS = 0; 
uintl6 public constant FUNCTION_TYPE_SEND = 1; 
uintl6 public constant FUNCTION_TYPE_SEND_BATCH = 2; 


bool public useCustomAdapterParams; 


event SetUseCustomAdapterParams(bool _useCustomAdapterParams); 


constructor(address _|lzEndpoint) NonblockingLzApp(_IzEndpoint) {} 


function supportsinterface(bytes4 interfaceld) public view virtual override(ERC165, 


IERC165) returns (bool) { 


return interfaceld ==  type(IONFT1155Core).interfaceld || 


super.supportsInterface(interfaceld); 


} 


function estimateSendFee(uintl6 _dstChainld, bytes memory _toAddress, uint _tokenld, 


uint _amount, bool _useZro, bytes memory _adapterParams) public view virtual override 
returns (uint nativeFee, uint zroFee) { 

return estimateSendBatchFee(_dstChainld, toAddress, _toSingletonArray(_tokenld), 
_toSingletonArray(_amount), useZro, adapterParams); 


} 


function estimateSendBatchFee(uintl6 _dstChainld, bytes memory _toAddress, uint[] 
memory _tokenlds, uint[] memory _amounts, bool useZro, bytes memory _adapterParams) 
public view virtual override returns (uint nativeFee, uint zroFee) { 
bytes memory payload = abi.encode(_toAddress, tokenlds, amounts); 
return IzEndpoint.estimateFees(_dstChainld, address(this), payload, _useZro, 
_adapterParams); 


} 


function sendFrom(address from, uintl16 _dstChainld, bytes memory _toAddress, uint 
_tokenld, uint amount, address payable _refundAddress, address _zroPaymentAddress, 
bytes memory _adapterParams) public payable virtual override { 
_sendBatch(_from, _dstChainld, _toAddress, _toSingletonArray(_tokenld), 
_toSingletonArray(_amount), _refundAddress, zroPaymentAddress, adapterParams); 


} 


function sendBatchFrom(address from, uintl6 _dstChainld, bytes memory _toAddress, 
uint[] memory _tokenlds, uintl[] memory _amounts, address payable _refundAddress, 
address _zroPaymentAddress, bytes memory _adapterParams) public payable virtual 
override { 


_sendBatch(_from, _dstChainld, _toAddress, tokenlds, _amounts, _refundAddress, 


_zroPaymentAddress, adapterParams); 


} 


function sendBatch(address from, uint16 dstChainld, bytes memory _toAddress, uint[] 
memory _tokenlds, uint[] memory _amounts, address payable _refundAddress, address 
_zroPaymentAddress, bytes memory _adapterParams) internal virtual { 
_debitFrom(_from, dstChainld, toAddress, tokenlds, amounts); 
bytes memory payload = abi.encode(_toAddress, tokenlds, amounts); 
if ( tokenlds.length == 1) { 
if (useCustomAdapterParams) { 
_checkGasLimit(_dstChainld, FUNCTION _TYPE_SEND, _adapterParams, 
NO_EXTRA_GAS); 
} else { 


require(_adapterParams.length == 0, "LzApp: _adapterParams must be empty."); 


_IzSend(_dstChainld, payload, _refundAddress, _zroPaymentAddress, 
_adapterParams, msg.value); 
emit SendToChain(_dstChainld, from, toAddress, tokenlds[0], amounts[0]); 
} else if (_tokenlds.length > 1) { 
if (useCustomAdapterParams) { 
_checkGasLimit(_dstChainld, FUNCTION _TYPE_SEND_ BATCH, _adapterParams, 
NO_EXTRA_GAS); 
} else { 


require(_adapterParams.length == 0, "LzApp: _adapterParams must be empty."); 


_IzSend(_dstChainld, payload, _refundAddress, _zroPaymentAddress, 


_adapterParams, msg.value); 


emit SendBatchToChain(_dstChainld, from, toAddress, tokenlds, amounts); 


function _nonblockingLzReceive( 
uint16 _srcChainld, 
bytes memory _srcAddress, 
uint64, /*_nonce*/ 
bytes memory _payload 
) internal virtual override { 
// decode and load the toAddress 
(bytes memory toAddressBytes, uint[] memory tokenlds, uint[] memory amounts) = 
abi.decode(_payload, (bytes, uint[], uint[])); 
address toAddress; 
assembly { 


toAddress := mload(add(toAddressBytes, 20)) 


_creditTo(_srcChainld, toAddress, tokenlds, amounts); 


if (tokenlds.length == 1) { 
emit ReceiveFromChain(_srcChainld, _srcAddress, toAddress, tokenlds[0], 
amounts[0]); 
} else if (tokenlds.length > 1) { 


emit ReceiveBatchFromChain(_srcChainld, _srcAddress, toAddress, tokenlds, 


amounts); 


} 


function setUseCustomAdapterParams(bool _useCustomAdapterParams) external 
onlyOwner { 
useCustomAdapterParams = _useCustomAdapterParams; 


emit SetUseCustomAdapterParams(_useCustomAdapterParams); 


function debitFrom(address from, uintl16 dstChainld, bytes memory _toAddress, uint[] 


memory _tokenlds, uint[] memory _amounts) internal virtual; 


function _creditTo(uint16 srcChainld, address toAddress, uint[] memory _tokenlds, uint[] 


memory _amounts) internal virtual; 


function toSingletonArray(uint element) internal pure returns (uint[] memory) { 
uint[] memory array = new uint[](1); 
array[0] = element; 


return array; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\onft/ONFT721.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity “0.8.0; 


import "./ILONFT721.sol"; 
import "./ONFT721Core.sol"; 


import "@openzeppelin/contracts/token/ERC721/ERC721.sol"; 


// NOTE: this ONFT contract has no public minting logic. 
// must implement your own minting logic in child classes 
contract ONFT721 is ONFT721Core, ERC721, IONFT721 { 
constructor(string memory _name, string memory _symbol, uint256 _minGasToTransfer, 
address IzEndpoint) ERC721(_name,  _symbol) ONFT721Core(_minGasToTransfer, 


_IzEndpoint) {} 


function supportsInterface(bytes4 interfaceld) public view virtual override(ONFT721Core, 


ERC721, IERC165) returns (bool) { 


return interfaceld type(IONFT721).interfaceld || 
super.supportsInterface(interfaceld); 


} 


function debitFrom(address from, uint16, bytes memory, uint tokenld) internal virtual 
override { 
require(_isApprovedOrOwner(_msgSender(), _tokenld), "ONFT721: send caller is not 


owner nor approved"); 


require(ERC721.ownerOf(_tokenld) == from, "ONFT721: send from incorrect owner"); 


_transfer(_from, address(this), tokenld); 


function creditTo(uint16, address toAddress, uint _tokenld) internal virtual override { 
require(!_exists(_tokenld) || (_exists(_tokenld) && ERC721.ownerOf(_tokenld) == 
address(this))); 
if (!_exists(_tokenld)) { 
_safeMint(_toAddress, tokenld); 
} else { 


_transfer(address(this), toAddress, tokenld); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\onft/ONFT721Core.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.0; 


import "./LONFT721Core.sol"; 
import "../../IZApp/NonblockingLzApp.sol"; 


import "@openzeppelin/contracts/utils/introspection/ERC165.sol"; 


abstract contract ONFT721Core is NonblockingLzApp, ERC165, IONFT721Core { 


uintl6 public constant FUNCTION_TYPE_SEND = 1; 


struct StoredCredit { 
uint16 srcChainld; 
address toAddress; 
uint256 index; // which index of the tokenlds remain 


bool creditsRemain; 


uint256 public minGasToTransferAndStore; // min amount of gas required to transfer, and 
also store the payload 

mapping(uintl6 => uint256) public dstChainldToBatchLimit; 

mapping(uintl6 => uint256) public dstChainldToTransferGas; // per transfer amount of 
gas required to mint/transfer on the dst 


mapping(bytes32 => StoredCredit) public storedCredits; 


constructor(uint256 §=_minGasToTransferAndStore, address —_|zEndpoint) 
NonblockingLzApp(_IzEndpoint) { 
require(_minGasToTransferAndStore > 0, "ONFT721: minGasToTransferAndStore must 
be > 0"); 


minGasToTransferAndStore = _minGasToTransferAndStore; 


function supportsinterface(bytes4 interfaceld) public view virtual override(ERC165, 
IERC165) returns (bool) { 
return interfaceld == _~ type(IONFT721Core).interfaceld || 
super.supportsInterface(interfaceld); 


} 


function estimateSendFee(uintl6 _dstChainld, bytes memory _toAddress, uint _tokenld, 
bool _useZro, bytes memory _adapterParams) public view virtual override returns (uint 
nativeFee, uint zroFee) { 
return estimateSendBatchFee(_dstChainld, _toAddress, _toSingletonArray(_tokenld), 
_useZro, _adapterParams); 


} 


function estimateSendBatchFee(uintl6 _dstChainld, bytes memory _toAddress, uint[] 
memory _tokenlds, bool _useZro, bytes memory _adapterParams) public view virtual 
override returns (uint nativeFee, uint zroFee) { 
bytes memory payload = abi.encode(_toAddress, tokenlds); 
return IzEndpoint.estimateFees(_dstChainld, address(this), payload, _useZro, 


_adapterParams); 


function sendFrom(address from, uint16 _dstChainld, bytes memory _toAddress, uint 
_tokenld, address payable _refundAddress, address _zroPaymentAddress, bytes memory 
_adapterParams) public payable virtual override { 
_send(_ from, _dstChainld, _toAddress, _toSingletonArray(_tokenld), _refundAddress, 
_zroPaymentAddress, _adapterParams); 


} 


function sendBatchFrom(address from, uintl6 _dstChainld, bytes memory _toAddress, 
uint[] memory _tokenlds, address payable _refundAddress, address _zroPaymentAddress, 
bytes memory _adapterParams) public payable virtual override { 


_send(_from, dstChainld, toAddress, tokenlds, refundAddress, zroPaymentAddress, 


_adapterParams); 


} 


function _send(address from, uintl6 _dstChainld, bytes memory _toAddress, uint[] 
memory _tokenlds, address payable _refundAddress, address _zroPaymentAddress, bytes 
memory _adapterParams) internal virtual { 
// allow 1 by default 
require(_tokenlds.length > 0, "LzApp: tokenlds[] is empty"); 
require(_tokenlds.length == 1 ||  _tokenlds.length <= 


dstChainldToBatchLimit[_dstChainld], "ONFT721: batch size exceeds dst batch limit"); 


for (uint i = 0; i < _tokenlds.length; i++) { 


_debitFrom(_from, dstChainld, toAddress, tokenlds[i]); 


bytes memory payload = abi.encode(_toAddress, tokenlds); 


_checkGasLimit(_dstChainld, FUNCTION_TYPE_SEND, —_adapterParams, 
dstChainldToTransferGas[_dstChainld] * tokenlds.length); 
_IzSend(_dstChainld, payload, _refundAddress, zroPaymentAddress, adapterParams, 
msg.value); 


emit SendToChain(_dstChainld, from, toAddress, tokenlds); 


function _nonblockingLzReceive( 
uint16 _srcChainld, 
bytes memory _srcAddress, 
uint64, /*_nonce*/ 
bytes memory _payload 
) internal virtual override { 
// decode and load the toAddress 
(bytes memory toAddressBytes, uint[] memory tokenlds) = abi.decode(_payload, 


(bytes, uint[])); 


address toAddress; 
assembly { 


toAddress := mload(add(toAddressBytes, 20)) 


uint nextIndex = _creditTill(_srcChainld, toAddress, 0, tokenlds); 
if (nextIndex < tokenlds.length) { 
// not enough gas to complete transfers, store to be cleared in another tx 
bytes32 hashedPayload = keccak256(_payload); 
storedCredits[hashedPayload] = StoredCredit(_srcChainld, toAddress, nextIndex, 
true); 


emit CreditStored(hashedPayload, payload); 


emit ReceiveFromChain(_srcChainld, _srcAddress, toAddress, tokenlds); 


// Public function for anyone to clear and deliver the remaining batch sent tokenlds 
function clearCredits(bytes memory _payload) external { 
bytes32 hashedPayload = keccak256(_payload); 


require(storedCredits[hashedPayload].creditsRemain, "ONFT721: no credits stored"); 


(, uint[] memory tokenlds) = abi.decode(_payload, (bytes, uint[])); 


uint nextIndex =  _creditTill(storedCredits[hashedPayload].srcChainld, 
storedCredits[hashedPayload].toAddress, storedCredits[hashedPayload].index, tokenlds); 
require(nextindex > storedCredits[hashedPayload].index, "ONFT721: not enough gas to 


process credit transfer"); 


if (nextIndex == tokenlds.length) { 


// cleared the credits, delete the element 


delete storedCredits[hashedPayload]; 
emit CreditCleared(hashedPayload); 
} else { 
// store the next index to mint 
storedCredits[hashedPayload] = 
StoredCredit(storedCredits[hashedPayload].srcChainld, 
storedCredits[hashedPayload].toAddress, nextIndex, true); 


} 


// When a srcChain has the ability to transfer more chainlds in a single tx than the dst can 
do. 
// Needs the ability to iterate and stop if the minGasToTransferAndStore is not met 
function _creditTill(uintl6 —srcChainld, address _toAddress, uint _startlndex, uint[] 
memory _tokenlds) internal returns (uint256) { 
uint i = _startIndex; 
while (i < _tokenlds.length) { 
// if not enough gas to process, store this index for next loop 


if (gasleft() < minGasToTransferAndStore) break; 


_creditTo(_srcChainld, toAddress, tokenlds[i]); 


i++; 


// indicates the next index to send of tokenlds, 


// if i == tokenlds.length, we are finished 


return i: 


function setMinGasToTransferAndStore(uint256 _minGasToTransferAndStore) external 
onlyOwner { 
require(_minGasToTransferAndStore > 0, "ONFT721: minGasToTransferAndStore must 
be > 0"); 


minGasToTransferAndStore = _minGasToTransferAndStore; 


// ensures enough gas in adapter params to handle batch transfer gas amounts on the dst 
function setDstChainldToTransferGas(uint16 _dstChainld, uint256 
_dstChainldToTransferGas) external onlyOwner { 
require(_dstChainldToTransferGas > 0, "ONFT721: dstChainldToTransferGas must be > 
0"); 


dstChainldToTransferGas[_dstChainld] = _dstChainldToTransferGas; 


// limit on src the amount of tokens to batch send 
function setDstChainldToBatchLimit(uintl6 _dstChainld, uint256 _dstChainldToBatchLimit) 
external onlyOwner { 
require(_dstChainldToBatchLimit > 0, "ONFT721: dstChainldToBatchLimit must be > 
0"); 


dstChainldToBatchLimit[_dstChainld] = _dstChainldToBatchLimit; 


function _debitFrom(address from, uint16 dstChainld, bytes memory _toAddress, uint 


_tokenld) internal virtual; 


function creditTo(uint16 srcChainld, address toAddress, uint tokenld) internal virtual; 


function toSingletonArray(uint element) internal pure returns (uint[] memory) { 
uint[] memory array = new uint[](1); 
array[0] = element; 


return array; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\onft\extension/ProxyONFT115 
5.Sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.0; 


import "../ONFT1155Core.sol"; 
import "@openzeppelin/contracts/token/ERC1155/IERC1155.sol"; 
import "@openzeppelin/contracts/token/ERC1155/IERC1155Receiver.sol"; 


import "@openzeppelin/contracts/utils/introspection/ERC165Checker.sol"; 


contract ProxyONFT1155 is ONFT1155Core, IERC1155Receiver { 


using ERC165Checker for address; 


IERC1155 public immutable token; 


constructor(address _|zEndpoint, address proxyToken) ONFT1155Core(_IzEndpoint) { 
require(_proxyToken.supportsInterface(type(IERC1155).interfaceld), "ProxyONFT1155: 
invalid ERC1155 token"); 


token = IERC1155(_proxyToken); 


function supportsinterface(bytes4 interfaceld) public view virtual override(ONFT1155Core, 
IERC165) returns (bool) { 
return interfaceld == _ type(IERC1155Receiver).interfaceld || 


super.supportsInterface(interfaceld); 


function _debitFrom(address from, uintl6, bytes memory, uint[] memory _tokenlds, 
uint[] memory _amounts) internal virtual override { 
require(_from == _msgSender(), "ProxyONFT1155: owner is not send caller"); 


token.safeBatchTransferFrom(_from, address(this), tokenlds, amounts, ""); 


function _creditTo(uintl6, address toAddress, uint[] memory _tokenlds, uint[] memory 
_amounts) internal virtual override { 


token.safeBatchTransferFrom(address(this), toAddress, tokenlds, amounts, ""); 


function onERC1155Received(address _operator, address, uint, uint, bytes memory) 
public virtual override returns (bytes4) { 

// only allow `thisò to tranfser token from others 

if (operator != address(this)) return bytes4(0); 


return this.onERC1155Received.selector; 


function onERC1155BatchReceived(address operator, address, uint[] memory, uint[] 
memory, bytes memory) public virtual override returns (bytes4) { 

// only allow `thisò to tranfser token from others 

if (_operator != address(this)) return bytes4(0); 


return this.onERC1155BatchReceived.selector; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\onft\extension/ProxyONFT721 


.SOl---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.0; 


import "@openzeppelin/contracts/token/ERC721/IERC721.sol"; 
import "@openzeppelin/contracts/token/ERC721/IERC721Receiver.sol"; 
import "@openzeppelin/contracts/utils/introspection/ERC165Checker.sol"; 


import "../ONFT721Core.sol"; 


contract ProxyONFT721 is ONFT721Core, IERC721Receiver { 


using ERC165Checker for address; 


IERC721 public immutable token; 


constructor(uint256 _minGasToTransfer, address |zEndpoint, address _proxyToken) 
ONFT721Core(_minGasToTransfer, |IzEndpoint) { 
require(_proxyToken.supportsinterface(type(IERC721).interfaceld), "ProxyONFT721: 
invalid ERC721 token"); 


token = IERC721(_proxyToken); 


function supportsInterface(bytes4 interfaceld) public view virtual override returns (bool) { 
return interfaceld == _ type(IERC721Receiver).interfaceld || 


super.supportsInterface(interfaceld); 


function debitFrom(address from, uint16, bytes memory, uint tokenld) internal virtual 


override { 


require(_from == _msgSender(), "ProxyONFT721: owner is not send caller"); 


token.safeTransferFrom(_from, address(this), tokenld); 


// TODO apply same changes from regular ONFT721 


function creditTo(uint16, address toAddress, uint _tokenld) internal virtual override { 


token.safeTransferFrom(address(this), toAddress, tokenld); 


function onERC721Received(address _operator, address, uint, bytes memory) public 
virtual override returns (bytes4) { 

// only allow `thisò to transfer token from others 

if (operator != address(this)) return bytes4(0); 


return IERC721Receiver.onERC721Received.selector; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\token\onft\extension/UniversalONFT 
721.Sol---- 


// SPDX-License-Identifier: BUSL-1.1 


pragma solidity *0.8.0; 


import "../ONFT721.sol"; 


/// @title Interface of the UniversalONFT standard 
contract UniversalONFT721 is ONFT721 { 
uint public nextMintld; 


uint public maxMintld; 


/// @notice Constructor for the UniversalONFT 

/// @param _name the name of the token 

/// @param _symbol the token symbol 

/// @param _layerZeroEndpoint handles message transmission across chains 

/// @param _startMintld the starting mint number on this chain 

/// @param _endMintld the max number of mints on this chain 

constructor(string memory _name, string memory _symbol, uint256 _minGasToTransfer, 
address layerZeroEndpoint, uint _startMintld, uint _endMintld) ONFT721(_name, _symbol, 
_minGasToTransfer, layerZeroEndpoint) { 
nextMintld = _startMintld; 


maxMintld = _endMintld; 


/// @notice Mint your ONFT 
function mint() external payable { 


require(nextMintld <= maxMintld, "UniversalONFT721: max mint limit reached"); 


uint newld = nextMintld; 


nextMintld++; 


_SafeMint(msg.sender, newld); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\util/BytesLib.sol---- 
// SPDX-License-lIdentifier: Unlicense 
[* 

* @title Solidity Bytes Arrays Utils 

* @author GonA§alo SA; <goncalo.sa@consensys.net> 

* 

* @dev Bytes tightly packed arrays utility library for ethereum contracts written in Solidity. 
¥ The library lets you concatenate, slice and type cast bytes arrays both in memory and 
storage. 

"I 

pragma solidity >=0.8.0 <0.9.0; 


library BytesLib { 

function concat( 
bytes memory _preBytes, 
bytes memory _postBytes 

) 

internal 

pure 

returns (bytes memory) 


{ 


bytes memory tempBytes; 


assembly { 


// Get a location of some free memory and store it in tempBytes as 


// Solidity does for memory variables. 


tempBytes := mload(0x40) 


// Store the length of the first bytes array at the beginning of 
// the memory for tempBytes. 
let length := mload(_preBytes) 


mstore(tempBytes, length) 


// Maintain a memory counter for the current write location in the 
// temp bytes array by adding the 32 bytes for the array length to 
// the starting location. 

let mc := add(tempBytes, 0x20) 
// Stop copying when the memory counter reaches the length of the 
// first bytes array. 


let end := add(mc, length) 


for { 
// Initialize a copy counter to the start of the _preBytes data, 
// 32 bytes into its memory. 
let cc := add(_preBytes, 0x20) 
} It(mc, end) { 
// Increase both counters by 32 bytes each iteration. 
mc := add(mc, 0x20) 
cc := add(cc, 0x20) 
ret 


// Write the _preBytes data into the tempBytes memory 32 bytes 


// at a time. 


mstore(mc, mload(cc)) 


// Add the length of _postBytes to the current length of tempBytes 
// and store it as the new length in the first 32 bytes of the 
// tempBytes memory. 

length := mload(_postBytes) 


mstore(tempBytes, add(length, mload(tempBytes))) 


// Move the memory counter back from a multiple of 0x20 to the 
// actual end of the _preBytes data. 
mc := end 
// Stop copying when the memory counter reaches the new combined 
// length of the arrays. 


end := add(mc, length) 


for { 

let cc := add(_postBytes, 0x20) 
} It(mc, end) { 

mc := add(mc, 0x20) 

cc := add(cc, 0x20) 
}{ 


mstore(mc, mload(cc)) 


// Update the free-memory pointer by padding our last write location 

// to 32 bytes: add 31 bytes to the end of tempBytes to move to the 

// next 32 byte block, then round down to the nearest multiple of 

// 32. \f the sum of the length of the two arrays is zero then add 

// one before rounding down to leave a blank 32 bytes (the length block with 0). 
mstore(0x40, and( 
add(add(end, iszero(add(length, mload(_preBytes)))), 31), 
not(31) // Round down to the nearest 32 bytes. 


)) 


return tempBytes; 


function concatStorage(bytes storage preBytes, bytes memory _postBytes) internal { 
assembly { 
// Read the first 32 bytes of preBytes storage, which is the length 
// of the array. (We don't need to use the offset into the slot 
// because arrays use the entire slot.) 
let fslot := sload(_preBytes.slot) 
// Arrays of 31 bytes or less have an even value in their slot, 
// while longer arrays have an odd value. The actual length is 
// the slot divided by two for odd values, and the lowest order 
// byte divided by two for even values. 
// If the slot is even, bitwise and the slot with 255 and divide by 


// two to get the length. If the slot is odd, bitwise and the slot 


// with -1 and divide by two. 
let slength := div(and(fslot, sub(mul(0x100, iszero(and(fslot, 1))), 1)), 2) 
let mlength := mload(_postBytes) 
let newlength := add(slength, mlength) 
// slength can contain both the length and contents of the array 
// if length < 32 bytes so let's prepare for that 
// V. 


http://solidity.readthedocs.io/en/latest/miscellaneous.html#layout-of-state-variables-in-stora 


ge 
switch add(It(slength, 32), It(newlength, 32)) 
case 2 { 
// Since the new array still fits in the slot, we just need to 
// update the contents of the slot. 
// uint256(bytes storage) = uint256(bytes storage) + uint256(bytes memory) + 
new_length 


sstore( 

_preBytes.slot, 

// all the modifications to the slot are inside this 

// next block 

add( 

// we can just add to the slot contents because the 
// bytes we want to change are the LSBs 

fslot, 

add( 

mul( 


div( 


// load the bytes from memory 
mload(add(_postBytes, 0x20)), 

// zero all bytes to the right 

exp(0x100, sub(32, mlength)) 

), 

// and now shift left the number of bytes to 
// leave space for the length in the slot 
exp(0x100, sub(32, newlength)) 

), 

// increase length by the double of the memory 
// bytes length 

mul(mlength, 2) 

) 

) 

) 


case 1 { 


// The stored value fits in the slot, but the combined value 


// will exceed it. 


// get the keccak hash to get the contents of the array 


mstore(Ox0, _preBytes.slot) 


let sc := add(keccak256(0x0, 0x20), div(slength, 32)) 


// save new length 


sstore(_preBytes.slot, add(mul(newlength, 2), 1)) 


// The contents of the _postBytes array start 32 bytes into 

// the structure. Our first read should obtain the `submod` 

// bytes that can fit into the unused space in the last word 

// of the stored array. To get this, we read 32 bytes starting 

// from `submod`, so the data we read overlaps with the array 
// contents by `submod` bytes. Masking the lowest-order 

// `submod` bytes allows us to add that value directly to the 


// stored value. 


let submod := sub(32, slength) 
let mc := add(_postBytes, submod) 
let end := add(_postBytes, mlength) 


let mask := sub(exp(0x100, submod), 1) 


sstore( 

SC, 

add( 

and( 

fslot, 

Ox FFF FFF FFF FF FFF FFF FFF TOO 
), 

and(mload(mc), mask) 

) 

) 


for { 


mc := add(mc, 0x20) 
sc := add(sc, 1) 
} It(mc, end) { 
sc := add(sc, 1) 
mc := add(mc, 0x20) 
} { 


sstore(sc, mload(mc)) 


mask := exp(0x100, sub(mc, end)) 


sstore(sc, mul(div(mload(mc), mask), mask)) 

} 

default { 

// get the keccak hash to get the contents of the array 
mstore(Ox0, _preBytes.slot) 

// Start copying to the last used word of the stored array. 


let sc := add(keccak256(0x0, 0x20), div(slength, 32)) 


// save new length 


sstore(_preBytes.slot, add(mul(newlength, 2), 1)) 


// Copy over the first `submod` bytes of the new data as in 
// case 1 above. 
let slengthmod := mod(slength, 32) 


let mlengthmod := mod(mlength, 32) 


let submod := sub(32, slengthmod) 
let mc := add(_postBytes, submod) 
let end := add(_postBytes, mlength) 


let mask := sub(exp(0x100, submod), 1) 


sstore(sc, add(sload(sc), and(mload(mc), mask))) 


for { 

sc := add(sc, 1) 

mc := add(mc, 0x20) 
} It(mc, end) { 

sc := add(sc, 1) 

mc := add(mc, 0x20) 
rt 


sstore(sc, mload(mc)) 


mask := exp(0x100, sub(mc, end)) 


sstore(sc, mul(div(mload(mc), mask), mask)) 


function slice( 


bytes memory bytes, 


uint256 _ start, 
uint256 length 
) 
internal 
pure 
returns (bytes memory) 
{ 
require(_ length + 31 >= _length, "slice_overflow"); 


require(_bytes.length >= start + length, "slice_outOfBounds"); 


bytes memory tempBytes; 


assembly { 
switch iszero(_length) 
case 0 { 
// Get a location of some free memory and store it in tempBytes as 
// Solidity does for memory variables. 


tempBytes := mload(0x40) 


// The first word of the slice result is potentially a partial 

// word read from the original array. To read it, we calculate 

// the length of that partial word and start copying that many 
// bytes into the array. The first word we copy will start with 

// data we don't care about, but the last “lengthmod’ bytes will 
// land at the beginning of the contents of the new array. When 


// we're done copying, we overwrite the full first word with 


// the actual length of the slice. 


let lengthmod := and(_length, 31) 


// The multiplication in the next line is necessary 
// because when slicing multiples of 32 bytes (lengthmod == 0) 
// the following copy loop was copying the origin's length 
// and then ending prematurely not copying everything it should. 
let mc := add(add(tempBytes, lengthmod), mul(0x20, iszero(lengthmod))) 


let end := add(mc, _length) 


for { 
// The multiplication in the next line has the same exact purpose 
// as the one above. 
let cc := add(add(add(_bytes, lengthmod), mul(0x20, iszero(lengthmod))), 
_start) 

} It(mc, end) { 

mc := add(mc, 0x20) 

cc := add(cc, 0x20) 
} { 


mstore(mc, mload(cc)) 


mstore(tempBytes, length) 


//update free-memory pointer 


//allocating the array padded to 32 bytes like the compiler does now 


mstore(0x40, and(add(mc, 31), not(31))) 


} 


//if we want a zero-length slice let's just return a zero-length array 


default { 
tempBytes := mload(0x40) 
//zero out the 32 bytes slice we are about to return 
//we need to do it because Solidity does not garbage collect 


mstore(tempBytes, 0) 


mstore(0x40, add(tempBytes, 0x20)) 


return tempBytes; 


function toAddress(bytes memory _bytes, uint256 start) internal pure returns (address) { 
require(_bytes.length >= start + 20, "toAddress outOfBounds"); 


address tempAddress; 


assembly { 


tempAddress := _ div(mload(add(add(_bytes, 0x20), _start)), 
0x1000000000000000000000000) 


} 


return tempAddress; 


function toUint8(bytes memory _bytes, uint256 start) internal pure returns (uint8) { 
require(_bytes.length >= start + 1, "toUint8 outOfBounds"); 


uint8 tempUint; 


assembly { 


tempUint := mload(add(add(_bytes, 0x1), _start)) 


return tempUint; 


function toUintl6(bytes memory _bytes, uint256 start) internal pure returns (uint16) { 
require(_bytes.length >= _ start + 2, "toUintl16 outOfBounds"); 


uintl6 tempuUint; 


assembly { 


tempUint := mload(add(add(_bytes, 0x2), _start)) 


return tempUint; 


function toUint32(bytes memory _bytes, uint256 start) internal pure returns (uint32) { 


require(_bytes.length >= _start + 4, "toUint32_ outOfBounds"); 


uint32 tempuUint; 


assembly { 


tempUint := mload(add(add(_bytes, 0x4), _start)) 


return tempUint; 


function toUint64(bytes memory _bytes, uint256 start) internal pure returns (uint64) { 
require(_bytes.length >= _ start + 8, "toUint64 outOfBounds"); 


uint64 tempuUint; 


assembly { 


tempUint := mload(add(add(_bytes, 0x8), _start)) 


return tempUint; 


function toUint96(bytes memory _bytes, uint256 start) internal pure returns (uint96) { 
require(_bytes.length >= start + 12, "toUint96 outOfBounds"); 


uint96 tempUint; 


assembly { 


tempUint := mload(add(add(_bytes, 0xc), _start)) 


return tempUint; 


function toUint128(bytes memory _bytes, uint256 start) internal pure returns (uint128) { 
require(_bytes.length >= start + 16, "toUint128 outOfBounds"); 


uintl28 tempUint; 


assembly { 


tempUint := mload(add(add(_bytes, 0x10), _start)) 


return tempUint; 


function toUint256(bytes memory _bytes, uint256 start) internal pure returns (uint256) { 
require(_bytes.length >= start + 32, "toUint256 outOfBounds"); 


uint256 tempUint; 


assembly { 


tempUint := mload(add(add(_bytes, 0x20), _start)) 


return tempUint; 


function toBytes32(bytes memory _bytes, uint256 start) internal pure returns (bytes32) 


require(_bytes.length >= start + 32, "toBytes32 outOfBounds"); 


bytes32 tempBytes32; 


assembly { 


tempBytes32 := mload(add(add(_bytes, 0x20), _start)) 


return tempBytes32; 


function equal(bytes memory _preBytes, bytes memory _postBytes) internal pure returns 
(bool) { 


bool success = true; 


assembly { 


let length := mload(_preBytes) 


// if lengths don't match the arrays are not equal 
switch eq(length, mload(_postBytes)) 
case 1 { 
// cb is a circuit breaker in the for loop since there's 
// no said feature for inline assembly loops 


// cb = 1 - don't breaker 


// cb = 0 - break 


let cb := 1 


let mc := add(_preBytes, 0x20) 


let end := add(mc, length) 


for { 
let cc := add(_postBytes, 0x20) 
// the next line is the loop condition: 
// while(uint256(mc < end) + cb == 2) 
} eq(add(It(mc, end), cb), 2) { 
mc := add(mc, 0x20) 
cc := add(cc, 0x20) 
}{ 
// if any of these checks fails then arrays are not equal 
if iszero(eq(mload(mc), mload(cc))) { 
// unsuccess: 
success := 0 


cb :=0 


} 
default { 
// unsuccess: 


success := 0 


return success; 


function equalStorage( 
bytes storage _preBytes, 
bytes memory _postBytes 

) 

internal 

view 

returns (bool) 

{ 


bool success = true; 


assembly { 
// we know _preBytes offset is 0 
let fslot := sload(_preBytes.slot) 
// Decode the length of the stored array like in concatStorage(). 
let slength := div(and(fslot, sub(mul(0x100, iszero(and(fslot, 1))), 1)), 2) 


let mlength := mload(_postBytes) 


// if lengths don't match the arrays are not equal 
switch eq(slength, mlength) 
case 1 { 


// slength can contain both the length and contents of the array 


// if length < 32 bytes so let's prepare for that 
// v. 
http://solidity.readthedocs.io/en/latest/miscellaneous.html#layout-of-state-variables-in-stora 
ge 
if iszero(iszero(slength)) { 
switch It(slength, 32) 
case 1 { 
// blank the last byte which is the length 


fslot := mul(div(fslot, 0x100), 0x100) 


if iszero(eq(fslot, mload(add(_postBytes, 0x20)))) { 
// unsuccess: 


success := 0 


} 

default { 

// cb is a circuit breaker in the for loop since there's 
// no said feature for inline assembly loops 

// cb = 1 - don't breaker 

// cb = 0 - break 


letcb:=1 


// get the keccak hash to get the contents of the array 
mstore(0x0, _preBytes.slot) 


let sc := keccak256(0x0, 0x20) 


let mc := add(_postBytes, 0x20) 


let end := add(mc, mlength) 


// the next line is the loop condition: 
// while(uint256(mc < end) + cb == 2) 
for {} eq(add(It(mc, end), cb), 2) { 
sc := add(sc, 1) 
mc := add(mc, 0x20) 
} { 
if iszero(eq(sload(sc), mload(mc))) { 
// unsuccess: 
success := 0 


cb :=0 


} 
default { 
// unsuccess: 


success := 0 


return success; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\util/ERC4494.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.0; 


import '@openzeppelin/contracts/utils/cryptography/EIP712.sol'; 
import '@openzeppelin/contracts/utils/cryptography/ECDSA.sol’; 
import '@openzeppelin/contracts/token/ERC721/ERC721.sol'; 


import '@openzeppelin/contracts/utils/Counters.sol'; 


[** 

* Modification of the OpenZeppelin ERC20Permit contract to support ERC721 tokens. 

s OpenZeppelin Contracts (last updated v4.8.0) 

(token/ERC20/extensions/draft-ERC20Permit.sol). 

* 

* @dev Implementation of the ERC-4494 Permit extension allowing approvals to be made 
via signatures, as defined in 

* https://eips.ethereum.org/EIPS/eip-4494[EIP-4494]. 

* 

* Adds the {permit} method, which can be used to change an account's ERC721 allowance 
(see {IERC721-allowance}) by 

* presenting a message signed by the account. By not relying on ‘{IERC721-approve} >, the 
token holder account doesn't 

* need to send a transaction, and thus is not required to hold Ether at all. 

*/ 


abstract contract ERC721Permit is ERC721, EIP712 { 


using Counters for Counters.Counter; 


mapping(address => Counters.Counter) private _nonces; 


// solhint-disable-next-line var-name-mixedcase 
bytes32 private constant PERMIT_TYPEHASH = 

keccak256( 

'Permit(address spender,uint256 tokenld,uint256 nonce,uint256 deadline)' 

); 
[** 
* @dev In previous versions ~_PERMIT_TYPEHASH~ was declared as ‘immutable’. 
* However, to ensure consistency with the upgradeable transpiler, we will continue 
* to reserve a slot. 
* @custom:oz-renamed-from _PERMIT_TYPEHASH 
*/ 
// solhint-disable-next-line var-name-mixedcase 


bytes32 private PERMIT _TYPEHASH DEPRECATED SLOT; 


[** 
* @dev Initializes the {EIP712} domain separator using the “name parameter, and 
setting ‘version’ to ~"1">. 
* 
* It's a good idea to use the same ‘name that is defined as the ERC721 token name. 
*/ 


constructor(string memory name) EIP712(name, '1') {} 


function permit( 
address spender, 
uint256 tokenld, 
uint256 deadline, 
uint8 v, 
bytes32 r, 
bytes32 s 

) public virtual { 


require(block.timestamp <= deadline, 'ERC721Permit: expired deadline’); 


address owner = ownerOf(tokenld); 
bytes32 structHash = keccak256( 
abi.encode( 
_PERMIT_TYPEHASH, 
spender, 
tokenld, 
_useNonce(owner), 


deadline 


bytes32 hash = _hashTypedDataV4(structHash); 


address signer = ECDSA.recover(hash, v, r, s); 


require(signer == owner, 'ERC721Permit: invalid signature’); 


_approve(spender, tokenld); 


[** 

* @dev See {IERC20Permit-nonces}. 

g 

function nonces(address owner) public view virtual returns (uint256) { 


return _nonces[owner].current(); 


[** 

* @dev See {IERC20Permit-DOMAIN_ SEPARATOR}. 

*/ 

// solhint-disable-next-line func-name-mixedcase 

function DOMAIN_SEPARATOR() external view returns (bytes32) { 


return _domainSeparatorV4(); 


[** 
* @dev "Consume a nonce": return the current value and increment. 
* 
*/ 
function _useNonce(address owner) 
internal 
virtual 


returns (uint256 current) 


Counters.Counter storage nonce = _nonces[owner]; 
current = nonce.current(); 


nonce.increment(); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\util/ExcessivelySafeCall.sol---- 
// SPDX-License-Identifier: MIT OR Apache-2.0 


pragma solidity >=0.7.6; 


library ExcessivelySafeCall { 
uint256 constant LOW_28 MASK = 


OxOO OO OOO OFFFFFTFEEFTFET EET ETE ETE FTF FTF ET FTF FFT FTF TT TTT; 


/// @notice Use when you _really_ really _really_ don't trust the called 
/// contract. This prevents the called contract from causing reversion of 
/// the caller in as many ways as we can. 
/// @dev The main difference between this and a solidity low-level call is 
/// that we limit the number of bytes that the callee can cause to be 
/// copied to caller memory. This prevents stupid things like malicious 
/// contracts returning 10,000,000 bytes causing a local OOG when copying 
/// to memory. 
/// @param _target The address to call 
/// @param _gas The amount of gas to forward to the remote contract 
/// @param _maxCopy The maximum number of bytes of returndata to copy 
/// to memory. 
/// @param _calldata The data to send to the remote contract 
/// @return success and returndata, as ~.call()°. Returndata is capped to 
/// `_maxCopy` bytes. 
function excessivelySafeCall( 
address target, 


uint256 _gas, 


uint16 maxCopy, 
bytes memory calldata 
) internal returns (bool, bytes memory) { 
// set up for assembly call 
uint256 toCopy; 
bool success; 
bytes memory _returnData = new bytes(_maxCopy); 
// dispatch message to recipient 
// by assembly calling "handle" function 
// we call via assembly to avoid memcopying a very large returndata 
// returned by a malicious contract 
assembly { 
_SUCCESS := Call( 
_gas, // gas 
_target, // recipient 
O, // ether value 
add(_calldata, 0x20), // inloc 
mload(_calldata), // inlen 
0, // outloc 
0 // outlen 
) 
// limit our copy to 256 bytes 
_toCopy := returndatasize() 
if gt(_ toCopy, maxCopy) { 


_toCopy := _maxCopy 


// Store the length of the copied bytes 
mstore(_returnData, toCopy) 

// copy the bytes from returndata[0:_toCopy] 
returndatacopy(add(_returnData, 0x20), 0, toCopy) 

} 


return (_success, _returnData); 


/// @notice Use when you _really_ really _really_ don't trust the called 
/// contract. This prevents the called contract from causing reversion of 
/// the caller in as many ways as we can. 
/// @dev The main difference between this and a solidity low-level call is 
/// that we limit the number of bytes that the callee can cause to be 
/// copied to caller memory. This prevents stupid things like malicious 
/// contracts returning 10,000,000 bytes causing a local OOG when copying 
/// to memory. 
/// @param _target The address to call 
/// @param _gas The amount of gas to forward to the remote contract 
/// @param _maxCopy The maximum number of bytes of returndata to copy 
/// to memory. 
/// @param _calldata The data to send to the remote contract 
/// @return success and returndata, as ~.call()°. Returndata is capped to 
/// `_maxCopy` bytes. 
function excessivelySafeStaticCall( 
address target, 


uint256 _gas, 


uint16 maxCopy, 
bytes memory calldata 
) internal view returns (bool, bytes memory) { 
// set up for assembly call 
uint256 toCopy; 
bool success; 
bytes memory _returnData = new bytes(_maxCopy); 
// dispatch message to recipient 
// by assembly calling "handle" function 
// we call via assembly to avoid memcopying a very large returndata 
// returned by a malicious contract 
assembly { 
_success := staticcall( 
_gas, // gas 
_target, // recipient 
add(_calldata, 0x20), // inloc 
mload(_calldata), // inlen 
0, // outloc 
0 // outlen 
) 
// limit our copy to 256 bytes 
_toCopy := returndatasize() 
if gt(_toCopy, maxCopy) { 
_toCopy := _maxCopy 
} 


// Store the length of the copied bytes 


mstore(_returnData, toCopy) 
// copy the bytes from returndata[0:_toCopy] 
returndatacopy(add(_returnData, 0x20), 0, toCopy) 
} 


return (_success, _returnData); 


[** 
* @notice Swaps function selectors in encoded contract calls 
* @dev Allows reuse of encoded calldata for functions with identical 
* argument types but different names. It simply swaps out the first 4 bytes 
* for the new selector. This function modifies memory in place, and should 
* only be used with caution. 
* @param _newSelector The new 4-byte selector 
* @param _buf The encoded contract args 
*/ 
function swapSelector(bytes4 _newSelector, bytes memory _buf) 
internal 
pure 
{ 

require(_buf.length >= 4); 

uint256 _mask = LOW_28_MASK; 

assembly { 

// load the first word of 

let word := mload(add(_buf, 0x20)) 


// mask out the top 4 bytes 


II [x 
_word := and(_word, _mask) 
_word := or(_newSelector, _word) 


mstore(add(_buf, 0x20), _word) 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\util/Multicall.sol---- 
// SPDX-License-Identifier: GPL-2.0-or-later 


pragma solidity >0.8.0; 


/// @title Multicall - aggregate results from multiple read-only function calls 
/// from https://github.com/Uniswap/v3-periphery/blob/main/contracts/base/Multicall.sol 
contract Multicall { 
function multicall(bytes[] calldata data) 
public 
payable 


returns (bytes[] memory results) 


results = new bytes[](data.length); 
for (uint256 i = 0; i < data.length; i++) { 
(bool success, bytes memory result) = address(this).delegatecall( 


datali] 


if (!success) { 
// Next 5 lines from https://ethereum.stackexchange.com/a/83577 
if (result.length < 68) revert(); 
assembly { 
result := add(result, 0x04) 
} 


revert(abi.decode(result, (string))); 


results[i] = result; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts/AssetRegister.sol 
// SPDX-License-Identifier: MIT 

pragma solidity *0.8.9; 

import "./interfaces/IStrategy.sol"; 

import "@boringcrypto/boring-solidity/contracts/libraries/BoringAddress.sol"; 


import "./ERC1155.sol"; 


// An asset is a token + a strategy 
struct Asset { 
TokenType tokenType; 
address contractAddress; 
IStrategy strategy; 


uint256 tokenld; 


contract AssetRegister is ERC1155 { 


using BoringAddress for address; 


mapping(address => mapping(address => mapping(uint256 => bool))) public 


isApprovedForAsset; 


event AssetRegistered( 
TokenType indexed tokenType, 
address indexed contractAddress, 


IStrategy strategy, 


uint256 indexed tokenld, 


uint256 assetid 


event ApprovalForAsset(address indexed sender, address indexed operator, uint256 


assetid, bool approved); 


// ids start at 1 so that id 0O means it's not yet registered 
mapping(TokenType => mapping(address => mapping(IStrategy => mapping(uint256 
=> uint256)))) public ids; 


Asset[] public assets; 


constructor() { 


assets.push(Asset(TokenType.None, address(0), NO_STRATEGY, 0)); 


function assetCount() public view returns (uint256) { 


return assets.length; 


function _registerAsset( 
TokenType tokenType, 
address contractAddress, 
IStrategy strategy, 
uint256 tokenld 
) internal returns (uint256 assetld) { 


// Checks 


assetid = ids[tokenType][contractAddress][strategy ][tokenld]; 


// If assetld is O, this is a new asset that needs to be registered 
if (assetlId == 0) { 
// Only do these checks if a new asset needs to be created 
require(tokenld == 0 || tokenType != TokenType.ERC20, "YieldBox: No tokenld for 
ERC20"); 
require( 
tokenType == TokenType.Native || 
(tokenType == strategy.tokenType() && contractAddress == 
strategy.contractAddress() && tokenld == strategy.tokenld()), 
"YieldBox: Strategy mismatch" 

); 

// \f a new token gets added, the isContract checks that this is a deployed contract. 
Needed for security. 

// Prevents getting shares for a future token whose address is known in advance. For 
instance a token that will be deployed with CREATE2 in the future or while the contract 
creation is 

// in the mempool 

require((tokenType == TokenType.Native && contractAddress == address(0)) || 


contractAddress.isContract(), "YieldBox: Not a token"); 


// Effects 
assetild = assets.length; 
assets.push(Asset(tokenType, contractAddress, strategy, tokenld)); 


ids[tokenType][contractAddress][strategy][tokenld] = assetld; 


// The actual URI isn't emitted here as per EIP1155, because that would make this 
call super expensive. 
emit URI("", assetld); 


emit AssetRegistered(tokenType, contractAddress, strategy, tokenld, assetld); 


function registerAsset(TokenType tokenType, address contractAddress, |Strategy 
strategy, uint256 tokenld) public returns (uint256 assetld) { 
// Native assets can only be added internally by the NativeTokenFactory 
require( 
tokenType == TokenType.ERC20 || tokenType == TokenType.ERC721 || tokenType 
== TokenType.ERC1155, 
"AssetManager: cannot add Native" 
); 


assetid = _registerAsset(tokenType, contractAddress, strategy, tokenld); 


function setApprovalForAsset(address operator, uint256 assetld, bool approved) external 
virtual { 
require(assetld < assetCount(), "AssetManager: asset not valid"); 


isApprovedForAsset[msg.sender][operator][assetld] = approved; 


emit ApprovalForAsset(msg.sender, operator, assetld, approved); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts/BoringMath.sol--- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.9; 


library BoringMath { 
function to1l28(uint256 a) internal pure returns (uint128 c) { 
require(a <= type(uint128).max, "BoringMath: uintl28 Overflow"); 


c = uint128(a); 


function to64(uint256 a) internal pure returns (uint64 c) { 
require(a <= type(uint64).max, "BoringMath: uint64 Overflow"); 


c = uint64(a); 


function to32(uint256 a) internal pure returns (uint32 c) { 
require(a <= type(uint32).max, "BoringMath: uint32 Overflow"); 


c = uint32(a); 


function muldiv( 
uint256 value, 
uint256 mul, 
uint256 div, 


bool roundUp 


) internal pure returns (uint256 result) { 
result = (value * mul) / div; 
if (roundUp && (result * div) / mul < value) { 


result++; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts/ERC1155.sol---- 
// SPDX-License-Identifier: MIT 


pragma solidity *0.8.9; 


import "@boringcrypto/boring-solidity/contracts/interfaces/IERC1155.sol"; 
import "@boringcrypto/boring-solidity/contracts/interfaces/IERC1155TokenReceiver.sol"; 


import "@boringcrypto/boring-solidity/contracts/libraries/BoringAddress.sol"; 


// Written by OreNoMochi (https://github.com/OreNoMochii), BoringCrypto 


contract ERC1155 is IERC1155 { 


using BoringAddress for address; 


// mappings 


mapping(address => mapping(address => bool)) public override isApprovedForAll; // map 
of operator approval 

mapping(address => mapping(uint256 => uint256)) public override balanceOf; // map of 
tokens owned by 


mapping(uint256 => uint256) public totalSupply; // totalSupply per token 


function supportsInterface(bytes4 interfacelD) public pure override returns (bool) { 
return 
interfacelD == this.supportsInterface.selector || // EIP-165 
interfacelD == 0xd9b67a26 || // ERC-1155 


interfacelD == 0x0e89341c; // EIP-1155 Metadata 


function balanceOfBatch(address[] calldata owners, uint256[] calldata ids) external view 
override returns (uint256[] memory balances) { 
uint256 len = owners.length; 


require(len == ids.length, "ERC1155: Length mismatch"); 


balances = new uint256[](len); 


for (uint256 i = 0; i < len; i++) { 


balances[i] = balanceOf[owners[i]][ids[i]]; 


function _mint(address to, uint256 id, uint256 value) internal { 


require(to != address(0), "No 0 address"); 


balanceOf[to][id] += value; 


totalSupply[id] += value; 


emit TransferSingle(msg.sender, address(0), to, id, value); 


function burn(address from, uint256 id, uint256 value) internal { 


require(from != address(0), "No 0 address"); 


balanceOf[from][id] -= value; 


totalSupply[id] -= value; 


emit TransferSingle(msg.sender, from, address(0), id, value); 


function _transferSingle(address from, address to, uint256 id, uint256 value) internal { 


require(to != address(0), "No 0 address"); 


balanceOf[from][id] -= value; 


balanceOf[to][id] += value; 


emit TransferSingle(msg.sender, from, to, id, value); 


function _transferBatch(address from, address to, uint256[] calldata ids, uint256[] 
calldata values) internal { 


require(to != address(0), "No 0 address"); 


uint256 len = ids.length; 

for (uint256 i = 0; i < len; i++) { 
uint256 id = ids[i]; 
uint256 value = values[i]; 
balanceOf[from][id] -= value; 


balanceOf[to][id] += value; 


emit TransferBatch(msg.sender, from, to, ids, values); 


function requireTransferAllowed(address from, bool approved) internal view virtual { 
require(_ from == msg.sender || approved || isApprovedForAll[_from][msg.sender] == 
true, "Transfer not allowed"); 


} 


function safeTransferFrom(address from, address to, uint256 id, uint256 value, bytes 
calldata data) external override { 


_requireTransferAllowed(from, false); 


_transferSingle(from, to, id, value); 


if (to.isContract()) { 


require( 


IERC1155TokenReceiver(to).onERC1155Received(msg.sender, from, id, value, 


bytes4(keccak256("onERC1155Received(address,address,uint256,uint256,bytes)")), 


"Wrong return value" 


function safeBatchTransferFrom( 
address from, 
address to, 
uint256[] calldata ids, 
uint256[] calldata values, 
bytes calldata data 
) external override { 
require(ids.length == values.length, "ERC1155: Length mismatch"); 


_requireTransferAllowed(from, false); 


_transferBatch(from, to, ids, values); 


if (to.isContract()) { 


require( 


IERC1155TokenReceiver(to).onERC1155BatchReceived(msg.sender, from, ids, 


values, data) == 


bytes4(keccak256("onERC1155BatchReceived(address,address,uint256[],uint256[],bytes)")) 


"Wrong return value" 


function setApprovalForAll(address operator, bool approved) external virtual override { 


isApprovedForAll[msg.sender][operator] = approved; 


emit ApprovalForAll(msg.sender, operator, approved); 


function uri(uint256 /*assetld*/) external view virtual returns (string memory) { 


return ""; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts/ERC1155TokenR 
eceiver.sol---- 
// SPDX-License-Identifier: MIT 


pragma solidity *0.8.9; 


import "@boringcrypto/boring-solidity/contracts/interfaces/IERC1155TokenReceiver.sol"; 


contract ERC1155TokenReceiver is IERC1155TokenReceiver { 
// ERC1155 receivers that simple accept the transfer 
function onERC1155Received( 
address, 
address, 
uint256, 
uint256, 
bytes calldata 
) external pure override returns (bytes4) { 
return Oxf23a6e61; 
//bytes4(keccak256("onERC1155Received(address,address,uint256,uint256,bytes)")) 


} 


function onERC1155BatchReceived( 
address, 
address, 
uint256[] calldata, 
uint256[] calldata, 


bytes calldata 


) external pure override returns (bytes4) { 
return Oxbc197c81; 
//bytes4(keccak256("onERC1155BatchReceived(address,address,uint256[],uint256[],bytes)" 


)) 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts/ERC721Receiver. 
sol---- 
// SPDX-License-Identifier: MIT 


pragma solidity *0.8.9; 


import "@openzeppelin/contracts/token/ERC721/IERC721Receiver.sol"; 


contract ERC721Receiver is IERC721Receiver { 
function onERC721Received( 
address, //operator 
address, //from 
uint256, //tokenld 
bytes calldata //data 
) external pure returns (bytes4) { 
return 0x150b7a02; 
//bytes4(keccak256("onERC721Received(address,address,uint256,bytes)")) 


} 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts/ERC721TokenRe 
ceiver.sol---- 
// SPDX-License-Identifier: MIT 


pragma solidity *0.8.9; 


import "@boringcrypto/boring-solidity/contracts/interfaces/IERC721TokenReceiver.sol"; 


contract ERC721TokenReceiver is IERC721TokenReceiver { 
function onERC721Received(address, address, uint256, bytes calldata) external pure 
override returns (bytes4) { 
return 0x150b7a02; 
//bytes4(keccak256("onERC721Received(address,address,uint256,bytes)")) 


} 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts/NativeTokenFact 
ory.sol---- 

// SPDX-License-lIdentifier: MIT 

pragma solidity *0.8.9; 

import "./AssetRegister.sol"; 


import "./BoringMath.sol"; 


struct NativeToken { 
string name; 
string symbol; 
uint8 decimals; 


string uri; 


/// @title NativeTokenFactory 

/// @author BoringCrypto (@Boring_Crypto) 

/// @notice The NativeTokenFactory is a token factory to create ERC1155 tokens. This is 
used by YieldBox to create 

/// native tokens in YieldBox. These have many benefits: 

/// - low and predictable gas usage 

/// - simplified approval 


/// - no hidden features, all these tokens behave the same 


contract NativeTokenFactory is AssetRegister { 


using BoringMath for uint256; 


mapping(uint256 => NativeToken) public nativeTokens; 
mapping(uint256 => address) public owner; 


mapping(uint256 => address) public pendingOwner; 


event TokenCreated(address indexed creator, string name, string symbol, uint8 decimals, 
uint256 tokenld); 
event OwnershipTransferred(uint256 indexed tokenld, address indexed previousOwner, 


address indexed newOwner); 


/ *** MODIFIERS *** // 


/// Modifier to check if the msg.sender is allowed to use funds belonging to the ‘from’ 
address. 
/// \f 'from' is msg.sender, it's allowed. 
/// \f 'msg.sender' is an address (an operator) that is approved by ‘from’, it's allowed. 
modifier allowed(address from, uint256 id) { 


_requireTransferAllowed(_from, isApprovedForAsset[_from][msg.sender][_id]); 


/// @notice Only allows the “owner to execute the function. 
/// @param tokenld The ‘tokenld* that the sender has to be owner of. 
modifier onlyOwner(uint256 tokenld) { 


require(msg.sender == owner[tokenld], "NTF: caller is not the owner"); 


/// @notice Transfers ownership to `newOwner`. Either directly or claimable by the new 
pending owner. 
/// Can only be invoked by the current ‘owner’. 
/// @param tokenld The “tokenld* of the token that ownership whose ownership will be 
transferred/renounced. 
/// @param newOwner Address of the new owner. 
/// @param direct True if `newOwner`ò should be set immediately. False if ~“newOwner’ 
needs to use “claimOwnership . 
[I| @param renounce Allows the “newOwner to be `address(0) if ‘direct’ and 
‘renounce’ is True. Has no effect otherwise. 
function transferOwnership(uint256 tokenld, address newOwner, bool direct, bool 
renounce) public onlyOwner(tokenld) { 
if (direct) { 
// Checks 


require(newOwner != address(0) || renounce, "NTF: zero address"); 


// Effects 
emit OwnershipTransferred(tokenld, owner[tokenld], newOwner); 
owner[tokenld] = newOwner; 
pendingOwner[tokenld] = address(0); 
} else { 
// Effects 


pendingOwner[tokenld] = newOwner; 


/// @notice Needs to be called by `pendingOwner` to claim ownership. 
/// @param tokenld The “tokenld* of the token that ownership is claimed for. 
function claimOwnership(uint256 tokenld) public { 


address pendingOwner = pendingOwner[tokenld]; 


// Checks 


require(msg.sender == _pendingOwner, "NTF: caller != pending owner"); 


// Effects 
emit OwnershipTransferred(tokenld, owner[tokenld], _pendingOwner); 
owner[tokenld] = _pendingOwner; 


pendingOwner[tokenld] = address(0); 


/// @notice Create a new native token. This will be an ERC1155 token. If later it's needed 
as an ERC20 token it can 
/// be wrapped into an ERC20 token. Native support for ERC1155 tokens is growing 
though. 
/// @param name The name of the token. 
/// @param symbol The symbol of the token. 
/// @param decimals The number of decimals of the token (this is just for display 
purposes). Should be set to 18 in normal cases. 


function createToken(string calldata name, string calldata symbol, uint8 decimals, string 


calldata uri) public returns (uint32 tokenld) { 

// To keep each Token unique in the AssetRegister, we use the assetid as the tokenld. 
So for native assets, the tokenld is always equal to the assetld. 

tokenld = assets.length.to32(); 

_registerAsset(TokenType.Native, address(0), NO STRATEGY, tokenld); 

// Initial supply is 0, use owner can mint. For a fixed supply the owner can mint and 

revoke ownership. 

// The msg.sender is the initial owner, can be changed after. 

nativeTokens[tokenld] = NativeToken(name, symbol, decimals, uri); 


owner[tokenld] = msg.sender; 


emit TokenCreated(msg.sender, name, symbol, decimals, tokenld); 
emit TransferSingle(msg.sender, address(0), address(0), tokenld, 0); 


emit OwnershipTransferred(tokenld, address(0), msg.sender); 


/// @notice The “owner can mint tokens. If a fixed supply is needed, the “owner should 
mint the totalSupply and renounce ownership. 

/// @param tokenld The token to be minted. 

/// @param to The account to transfer the minted tokens to. 

/// @param amount The amount of tokens to mint. 

/// @dev For security reasons, operators are not allowed to mint. Only the actual owner 
can do this. Of course the owner can be a contract. 

function mint(uint256 tokenld, address to, uint256 amount) public onlyOwner(tokenld) { 


_mint(to, tokenld, amount); 


/// @notice Burns tokens. Only the holder of tokens can burn them or an approved 
operator. 
/// @param tokenld The token to be burned. 
/// @param amount The amount of tokens to burn. 
function burn(uint256 tokenld, address from, uint256 amount) public allowed(from, 
tokenld) { 
require(assets[tokenld].tokenType == TokenType.Native, "NTF: Not native"); 


_burn(from, tokenld, amount); 


/// @notice The “owner can mint tokens. If a fixed supply is needed, the “owner should 
mint the totalSupply and renounce ownership. 
/// @param tokenld The token to be minted. 
/// @param tos The accounts to transfer the minted tokens to. 
/// @param amounts The amounts of tokens to mint. 
/// @dev If the tos array is longer than the amounts array there will be an out of bounds 
error. If the amounts array is longer, the extra amounts are simply ignored. 
/// @dev For security reasons, operators are not allowed to mint. Only the actual owner 
can do this. Of course the owner can be a contract. 
function batchMint(uint256 tokenld, address[] calldata tos, uint256[] calldata amounts) 
public onlyOwner(tokenld) { 
uint256 len = tos.length; 
for (uint256 i = 0; i < len; i++) { 


_mint(tos[i], tokenld, amounts[i]); 


/// @notice Burns tokens. This is only useful to be used by an operator. 
/// @param tokenld The token to be burned. 
/// @param froms The accounts to burn tokens from. 
/// @param amounts The amounts of tokens to burn. 
function batchBurn(uint256 tokenld, address[] calldata froms, uint256[] calldata amounts) 
public { 
require(assets[tokenld].tokenType == TokenType.Native, "NTF: Not native"); 
uint256 len = froms.length; 
for (uint256 i = 0; i < len; i++) { 
_requireTransferAllowed(froms[i], 
isApprovedForAsset[froms[i]][msg.sender][tokenld]); 


_burn(froms[i], tokenld, amounts[i]); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts/YieldBox.sol---- 


// SPDX-License-Identifier: UNLICENSED 


// The YieldBox 

// The original BentoBox is owned by the Sushi team to set strategies for each token. 
Abracadabra wanted different strategies, which led to 

// them launching their own DegenBox. The YieldBox solves this by allowing an unlimited 
number of strategies for each token in a fully 


// permissionless manner. The YieldBox has no owner and operates fully permissionless. 


// Other improvements: 
// Better system to make sure the token to share ratio doesn't reset. 


// Full support for rebasing tokens. 


// This contract stores funds, handles their transfers, approvals and strategies. 


// Copyright (c) 2021, 2022 BoringCrypto - All rights reserved 


// Twitter: @Boring_Crypto 


// Since the contract is permissionless, only one deployment per chain is needed. If it's not 
yet deployed 

// on a chain or if you want to make a derivative work, contact @BoringCrypto. The core of 
YieldBox is 


// copyrighted. Most of the contracts that it builds on are open source though. 


// BEWARE: Still under active development 


// Security review not done yet 


pragma solidity *0.8.9; 

pragma experimental ABIEncoderV2; 

import "./interfaces/IWrappedNative.sol"; 

import "./interfaces/IStrategy.sol"; 

import "@boringcrypto/boring-solidity/contracts/interfaces/IERC721.sol"; 
import "@boringcrypto/boring-solidity/contracts/interfaces/IERC1155.sol"; 
import "@boringcrypto/boring-solidity/contracts/libraries/Base64.sol"; 
import "@boringcrypto/boring-solidity/contracts/Domain.sol"; 

import "./ERC721TokenReceiver.sol"; 

import "./ERC1155TokenReceiver.sol"; 

import "./ERC1155.sol"; 

import "@boringcrypto/boring-solidity/contracts/BoringBatchable.sol"; 
import "@openzeppelin/contracts/utils/Strings.sol"; 

import "./AssetRegister.sol"; 

import "./NativeTokenFactory.sol"; 

import "./YieldBoxRebase.sol"; 

import "./YieldBoxURI|Builder.sol"; 


import "./YieldBoxPermit.sol"; 


// solhint-disable no-empty-blocks 


/// @title YieldBox 


/// @author BoringCrypto, Keno 


/// @notice The YieldBox is a vault for tokens. The stored tokens can assigned to strategies. 


/// Yield from this will go to the token depositors. 

/// Any funds transfered directly onto the YieldBox will be lost, use the deposit function 
instead. 

contract YieldBox is YieldBoxPermit, BoringBatchable, NativeTokenFactory, 
ERC721TokenReceiver, ERC1155TokenReceiver { 


// *** CONSTRUCTOR *** // 

using BoringAddress for address; 

using BoringERC20 for IERC20; 

using BoringERC20 for I|WrappedNative; 


using YieldBoxRebase for uint256; 


[| *** EVENTS *** // 

event Deposited( 
address indexed sender, 
address indexed from, 
address indexed to, 
uint256 assetld, 
uint256 amountin, 
uint256 shareln, 
uint256 amountOut, 
uint256 shareOut, 


bool isNFT 


event Withdraw( 
address indexed sender, 
address indexed from, 
address indexed to, 
uint256 assetld, 
uint256 amountin, 
uint256 shareln, 
uint256 amountOut, 


uint256 shareOut 


// *** CONSTRUCTOR *** // 


IWrappedNative public immutable wrappedNative; 


YieldBoxURIBuilder public immutable uriBuilder; 


constructor(IWrappedNative wrappedNative_, YieldBoxURIBuilder uriBuilder_) 
YieldBoxPermit("YieldBox") { 
wrappedNative = wrappedNative ; 


uriBuilder = uriBuilder_; 


// *** INTERNAL FUNCTIONS *** // 


/// @dev Returns the total balance of `token` the strategy contract holds, 
/// plus the total amount this contract thinks the strategy holds. 
function tokenBalanceOf(Asset storage asset) internal view returns (uint256 amount) { 


return asset.strategy.currentBalance(); 


// *** PUBLIC FUNCTIONS *** // 


/// @notice Deposit an amount of ‘token’ represented in either “amount® or ‘share’. 
/// @param assetld The id of the asset. 
/// @param from which account to pull the tokens. 
/// @param to which account to push the tokens. 
/// @param amount Token amount in native representation to deposit. 
/// @param share Token amount represented in shares to deposit. Takes precedence over 
“amount. 
/// @return amountOut The amount deposited. 
/// @return shareOut The deposited amount repesented in shares. 
function depositAsset( 
uint256 assetld, 
address from, 


address to, 


uint256 amount, 
uint256 share 
) public allowed(from, assetld) returns (uint256 amountOut, uint256 shareOut) { 
// Checks 
Asset storage asset = assets[assetld]; 
require(asset.tokenType != TokenType.Native && asset.tokenType != 


TokenType.ERC721, "YieldBox: can't deposit type"); 


// Effects 
uint256 totalAmount = _tokenBalanceOf(asset); 
if (share == 0) { 
// value of the share may be lower than the amount due to rounding, that's ok 
share = amount._toShares(totalSupply[assetld], totalAmount, false); 
} else { 
// amount may be lower than the value of share due to rounding, in that case, add 1 
to amount (Always round up) 


amount = share. toAmount(totalSupply[assetld], totalAmount, true); 


_mint(to, assetld, share); 


// Interactions 
if (asset.tokenType == TokenType.ERC20) { 
// For ERC20 tokens, use the safe helper function to deal with broken ERC20 
implementations. This actually calls transferFrom on the ERC20 contract. 


IERC20(asset.contractAddress).safeTransferFrom(from, address(asset.strategy), 


amount); 
} else { 
// ERC1155 
// When depositing yieldBox tokens into the yieldBox, things can be simplified 
if (asset.contractAddress == address(this)) { 
_transferSingle(from, address(asset.strategy), asset.tokenld, amount); 
} else { 
IERC1155(asset.contractAddress).safeTransferFrom(from, address(asset.strategy), 
asset.tokenld, amount, ""); 


} 


asset.strategy.deposited(amount); 


emit Deposited(msg.sender, from, to, assetld, amount, share, amountOut, shareOut, 


false); 


return (amount, share); 


/// @notice Deposit an NFT asset 

/// @param assetlid The id of the asset. 

/// @param from which account to pull the tokens. 
/// @param to which account to push the tokens. 
/// @return amountOut The amount deposited. 


/// @return shareOut The deposited amount repesented in shares. 


function depositNFTAsset( 
uint256 assetld, 
address from, 
address to 
) public allowed(from, assetld) returns (uint256 amountOut, uint256 shareOut) { 
// Checks 
Asset storage asset = assets[assetld]; 


require(asset.tokenType == TokenType.ERC721, "YieldBox: not ERC721"); 


// Effects 


_mint(to, assetid, 1); 


// Interactions 


IERC721(asset.contractAddress).safeTransferFrom(from, address(asset.strategy), 


asset.tokenld); 


asset.strategy.deposited(1); 


emit Deposited(msg.sender, from, to, assetid, 1, 1, 1, 1, true); 


return (1, 1); 


/// @notice Deposit ETH asset 


/// @param assetld The id of the asset. 


/// @param to which account to push the tokens. 


/// @param amount ETH amount to deposit. 
/// @return amountOut The amount deposited. 
/// @return shareOut The deposited amount repesented in shares. 
function depositETHAsset( 
uint256 assetld, 
address to, 
uint256 amount 
) public payable returns (uint256 amountOut, uint256 shareOut) { 
// Checks 
Asset storage asset = assets[assetld]; 
require(asset.tokenType == TokenType.ERC20 && asset.contractAddress == 


address(wrappedNative), "YieldBox: not wrappedNative"); 


// Effects 


uint256 share = amount. toShares(totalSupply[assetld], _tokenBalanceOf(asset), 


false); 


_mint(to, assetld, share); 


// Interactions 
wrappedNative.deposit{ value: amount }(); 
// Strategies always receive wrappedNative (Supporting both wrapped and raw native 
tokens adds too much complexity) 
wrappedNative.safeTransfer(address(asset.strategy), amount); 


asset.strategy.deposited(amount); 


emit Deposited(msg.sender, msg.sender, to, assetld, amount, share, amountOut, 


shareOut, false); 


return (amount, share); 


/// @notice Withdraws an amount of ‘token’ from a user account. 
/// @param assetld The id of the asset. 
/// @param from which user to pull the tokens. 
/// @param to which user to push the tokens. 
/// @param amount of tokens. Either one of “amount or ‘share’ needs to be supplied. 
/// @param share Like above, but share’ takes precedence over ‘amount’. 
function withdraw( 
uint256 assetld, 
address from, 
address to, 
uint256 amount, 
uint256 share 
) public allowed(from, assetld) returns (uint256 amountOut, uint256 shareOut) { 
// Checks 
Asset storage asset = assets[assetld]; 


require(asset.tokenType != TokenType.Native, "YieldBox: can't withdraw Native"); 


// Handle ERC721 separately 
if (asset.tokenType == TokenType.ERC721) { 


return _withdrawNFT(asset, assetld, from, to); 


return _withdrawFungible(asset, assetld, from, to, amount, share); 


/// @notice Handles burning and withdrawal of ERC20 and 1155 tokens. 
III @param asset The asset to withdraw. 
/// @param assetld The id of the asset. 
/// @param from which user to pull the tokens. 
/// @param to which user to push the tokens. 
function _withdrawNFT( 
Asset storage asset, 
uint256 assetld, 
address from, 
address to 
) internal returns (uint256 amountOut, uint256 shareOut) { 


_burn(from, assetlid, 1); 


// Interactions 


asset.strategy.withdraw(to, 1); 


emit Withdraw(msg.sender, from, to, assetid, 1, 1, 1, 1); 


return (1, 1); 


/// @notice Handles burning and withdrawal of ERC20 and 1155 tokens. 
/// @param asset The asset to withdraw. 
/// @param assetld The id of the asset. 
[I| @param from which user to pull the tokens. 
/// @param to which user to push the tokens. 
/// @param amount of tokens. Either one of “amount or ‘share’ needs to be supplied. 
//| @param share Like above, but “share” takes precedence over ‘amount’. 
function _withdrawFungible( 

Asset storage asset, 

uint256 assetld, 

address from, 

address to, 

uint256 amount, 

uint256 share 
) internal returns (uint256 amountOut, uint256 shareOut) { 

// Effects 

uint256 totalAmount = _tokenBalanceOf(asset); 

if (share == 0) { 

// value of the share paid could be lower than the amount paid due to rounding, in 
that case, add a share (Always round up) 
share = amount._toShares(totalSupply[assetld], totalAmount, true); 
} else { 
// amount may be lower than the value of share due to rounding, that's ok 


amount = share. toAmount(totalSupply[assetld], totalAmount, false); 


_burn(from, assetlid, share); 


// Interactions 


asset.strategy.withdraw(to, amount); 


emit Withdraw(msg.sender, from, to, assetld, amount, share, amountOut, shareOut); 


return (amount, share); 


/// @notice Transfer shares from a user account to another one. 
/// @param from which user to pull the tokens. 
/// @param to which user to push the tokens. 
/// @param assetld The id of the asset. 
/// @param share The amount of `token` in shares. 
function transfer( 
address from, 
address to, 
uint256 assetld, 
uint256 share 
) public allowed(from, assetld) { 


_transferSingle(from, to, assetld, share); 


function batchTransfer( 


address from, 


address to, 
uint256[] calldata assetlids _, 
uint256[] calldata shares _ 
) public allowed(from, type(uint256).max) { 


_transferBatch(from, to, assetlds_, shares_); 


/// @notice Transfer shares from a user account to multiple other ones. 
/// @param assetld The id of the asset. 
/// @param from which user to pull the tokens. 
///| @param tos The receivers of the tokens. 
[I| @param shares The amount of “token” in shares for each receiver in ‘tos’. 
function transferMultiple( 
address from, 
address[] calldata tos, 
uint256 assetld, 
uint256[] calldata shares 
) public allowed(from, type(uint256).max) { 
// Checks 
uint256 len = tos.length; 
for (uint256 i = 0; i < len; i++) { 
require(tos[i] != address(0), "YieldBox: to not set"); // To avoid a bad UI from burning 


funds 


// Effects 


uint256 totalAmount; 
for (uint256 i = 0; i < len; i++) { 
address to = tos[i]; 
uint256 share_ = shares[i]; 
balanceOf[to][assetld] += share _; 
totalAmount += share _; 
emit TransferSingle(msg.sender, from, to, assetlid, share_); 


} 


balanceOf[from][assetld] -= totalAmount; 


/// @notice Update approval status for an operator 
/// @param operator The address approved to perform actions on your behalf 
/// @param approved True/False 
function setApprovalForAll(address operator, bool approved) external override { 
// Checks 
require(operator != address(0), "YieldBox: operator not set"); // Important for security 


require(operator != address(this), "YieldBox: can't approve yieldBox"); 


// Effects 


_setApprovalForAll(msg.sender, operator, approved); 


/// @notice Update approval status for an operator 
/// @param _owner The YieldBox account owner 


/// @param operator The address approved to perform actions on your behalf 


/// @param approved True/False 
function _setApprovalForAll( 
address owner, 
address operator, 
bool approved 
) internal override{ 
isApprovedForAll[_owner][operator] = approved; 


emit ApprovalForAll(_owner, operator, approved); 


/// @notice Update approval status for an operator and for a specific asset 
/// @param operator The address approved to perform actions on your behalf 
/// @param assetlid The asset id to update approval status for 
[I| @param approved True/False 
function setApprovalForAsset( 
address operator, 
uint256 assetld, 
bool approved 
) external override { 
// Checks 
require(operator != address(0), "YieldBox: operator not set"); // Important for security 
require(operator != address(this), "YieldBox: can't approve yieldBox"); 


require(assetld < assetCount(), "YieldBox: asset not valid"); 


// Effects 


_setApprovalForAsset(msg.sender, operator, assetid, approved); 


/// @notice Update approval status for an operator and for a specific asset 
/// @param _owner The owner of the asset 
/// @param operator The address approved to perform actions on your behalf 
/// @param assetlid The asset id to update approval status for 
/// @param approved True/False 
function setApprovalForAsset( 
address owner, 
address operator, 
uint256 assetld, 
bool approved 
) internal override { 
isApprovedForAsset[_owner][operator][assetld] = approved; 


emit ApprovalForAsset(_owner, operator, assetld, approved); 


// This functionality has been split off into a separate contract. This is only a view function, 
SO gas usage isn't a huge issue. 
// This keeps the YieldBox contract smaller, so it can be optimized more. 
function uri(uint256 assetid) external view override returns (string memory) { 
return uriBuilder.uri(assets[assetld], nativeTokens[assetlid], totalSupply[assetld], 
owner[assetld]); 


} 


function name(uint256 assetid) external view returns (string memory) { 


return uriBuilder.name(assets[assetlid], nativeTokens[assetid].name); 


function symbol(uint256 assetid) external view returns (string memory) { 


return uriBuilder.symbol(assets[assetld], nativeTokens[assetld].symbol); 


function decimals(uint256 assetid) external view returns (uint8) { 


return uriBuilder.decimals(assets[assetid], nativeTokens[assetld].decimals); 


// Helper functions 


/// @notice Helper function to return totals for an asset 
/// @param assetld The regierestered asset id 
/// @return totalShare The total amount for asset represented in shares 
/// @return totalAmount The total amount for asset 
function assetTotals(uint256 assetid) external view returns (uint256 totalShare, uint256 
totalAmount) { 
totalShare = totalSupply[assetld]; 


totalAmount = _tokenBalanceOf(assets[assetld]); 


/// @dev Helper function to represent an `amount` of “token” in shares. 
/// @param assetld The id of the asset. 


/// @param amount The ‘token’ amount. 


/// @param roundup If the result `share`ò should be rounded up. 
/// @return share The token amount represented in shares. 
function toShare( 
uint256 assetld, 
uint256 amount, 
bool roundUp 
) external view returns (uint256 share) { 
if (assets[assetld].tokenType == TokenType.Native || assets[assetld].tokenType == 
TokenType.ERC721) { 
share = amount; 
} else { 
share = amount. toShares(totalSupply[assetld], _tokenBalanceOf(assets[assetld]), 
roundUp); 
} 


/// @dev Helper function represent shares back into the `token`ò amount. 
/// @param assetlid The id of the asset. 
/// @param share The amount of shares. 
/// @param roundUp If the result should be rounded up. 
/// @return amount The share amount back into native representation. 
function toAmount( 

uint256 assetld, 

uint256 share, 

bool roundUp 


) external view returns (uint256 amount) { 


if (assets[assetld].tokenType == TokenType.Native || assets[assetld].tokenType == 
TokenType.ERC721) { 
amount = share; 
} else { 
amount = share. toAmount(totalSupply[assetld], _tokenBalanceOf(assets[assetld]), 
roundUp); 
} 


/// @dev Helper function represent the balance in `tokenò amount for a “user for an 
`asset`. 
/// @param user The `user` to get the amount for. 
/// @param assetld The id of the asset. 


function amountOf(address user, uint256 assetld) external view returns (uint256 amount) 


if (assets[assetld].tokenType == TokenType.Native || assets[assetld].tokenType == 
TokenType.ERC721) { 
amount = balanceOf[user][assetld]; 
} else { 
amount = _ balanceOf[user][assetld]. toAmount(totalSupplylassetld], 
_tokenBalanceOf(assets[assetld]), false); 


} 


/// @notice Helper function to register & deposit an asset 


/// @param tokenType Registration token type. 


/// @param contractAddress Token address. 
/// @param strategy Asset's strategy address. 
/// @param tokenld Registration token id. 
[I| @param from which user to pull the tokens. 
/// @param to which account to push the tokens. 
/// @param amount amount to deposit. 
[I| @param share amount to deposit represented in shares. 
/// @return amountOut The amount deposited. 
/// @return shareOut The deposited amount repesented in shares. 
function deposit( 
TokenType tokenType, 
address contractAddress, 
IStrategy strategy, 
uint256 tokenld, 
address from, 
address to, 
uint256 amount, 
uint256 share 
) public returns (uint256 amountOut, uint256 shareOut) { 
if (tokenType == TokenType.Native) { 
// If native token, register it as an ERC1155 asset (as that's what it is) 
return depositAsset(registerAsset(TokenType.ERC1155, address(this), strategy, 
tokenld), from, to, amount, share); 
} else { 
return depositAsset(registerAsset(tokenType, contractAddress, strategy, tokenld), 


from, to, amount, share); 


/// @notice Helper function to register & deposit ETH 
/// @param strategy Asset's strategy address. 
/// @param amount amount to deposit. 
/// @return amountOut The amount deposited. 
/// @return shareOut The deposited amount repesented in shares. 
function depositETH( 
IStrategy strategy, 
address to, 
uint256 amount 
) public payable returns (uint256 amountOut, uint256 shareOut) { 
return depositETHAsset(registerAsset(TokenType.ERC20, address(wrappedNative), 
strategy, 0), to, amount); 


} 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts/YieldBoxPermit.s 
ol---- 


// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.0; 


import "@openzeppelin/contracts/utils/cryptography/EIP712.sol"; 
import "@openzeppelin/contracts/utils/cryptography/ECDSA.sol"; 
import "@openzeppelin/contracts/utils/Counters.sol"; 


import "./interfaces/lYieldBox.sol"; 


[** 
* Modification of the OpenZeppelin ERC20Permit contract to support ERC721 tokens. 

a OpenZeppelin Contracts (last updated v4.8.0) 
(token/ERC20/extensions/draft-ERC20Permit.sol). 
* 
* @dev Implementation of the ERC-4494 Permit extension allowing approvals to be made 
via signatures, as defined in 
* https://eips.ethereum.org/EIPS/eip-4494[EIP-4494]. 
* 
* Adds the {permit} method, which can be used to change an account's ERC721 allowance 
(see {IERC721-allowance}) by 
* presenting a message signed by the account. By not relying on `{IERC721-approve}`, the 
token holder account doesn't 
* need to send a transaction, and thus is not required to hold Ether at all. 


*/ 


abstract contract YieldBoxPermit is EIP712 { 


using Counters for Counters.Counter; 


mapping(address => Counters.Counter) private _nonces; 


bytes32 private constant PERMIT _TYPEHASH = 
keccak256("Permit(address owner,address spender,uint256 assetld,uint256 


nonce,uint256 deadline)"); 


bytes32 private constant PERMIT _ALL_TYPEHASH = 
keccak256("PermitAll(address owner,address spender,uint256 nonce,uint256 


deadline)"); 


[** 
* @dev Initializes the {EIP712} domain separator using the “name parameter, and 
setting ‘version’ to ~"1". 
* 
* It's a good idea to use the same ‘name that is defined as the ERC721 token name. 
*/ 


constructor(string memory name) EIP712(name, "1") {} 


function permit( 


address owner, 


address spender, 
uint256 assetld, 
uint256 deadline, 
uint8 v, 
bytes32 r, 
bytes32 s 

) public virtual { 


require(block.timestamp <= deadline, "YieldBoxPermit: expired deadline"); 


bytes32 structHash = keccak256(abi.encode(_PERMIT_TYPEHASH, owner, spender, 


assetid, useNonce(owner), deadline)); 


bytes32 hash = _hashTypedDataV4(structHash); 


address signer = ECDSA.recover(hash, v, r, s); 


require(signer == owner, "YieldBoxPermit: invalid signature"); 


_setApprovalForAsset(owner, spender, assetld, true); 


function setApprovalForAsset( 
address owner, 
address spender, 
uint256 assetld, 


bool approved 


) internal virtual; 


function permitAll( 
address owner, 
address spender, 
uint256 deadline, 
uint8 v, 
bytes32 r, 
bytes32 s 


) public virtual { 


require(block.timestamp <= deadline, "YieldBoxPermit: expired deadline"); 


bytes32 structHash = keccak256(abi.encode(_PERMIT_ALL_ TYPEHASH, owner, spender, 


_useNonce(owner), deadline)); 


bytes32 hash = _hashTypedDataV4(structHash); 


address signer = ECDSA.recover(hash, v, r, S); 


require(signer == owner, "YieldBoxPermit: invalid signature"); 


_setApprovalForAll(owner, spender, true); 


function _setApprovalForAll( 


address owner, 


address operator, 
bool approved 


) internal virtual; 


[** 

* @dev See {IERC20Permit-nonces}. 

*/ 

function nonces(address owner) public view virtual returns (uint256) { 


return _nonces[owner].current(); 


[** 

* @dev See {IERC20Permit-DOMAIN_SEPARATOR}. 

ay 

// solhint-disable-next-line func-name-mixedcase 

function DOMAIN _SEPARATOR() external view returns (bytes32) { 


return domainSeparatorvV4(); 


[** 

* @dev "Consume a nonce": return the current value and increment. 

* 

*/ 

function _useNonce(address owner) internal virtual returns (uint256 current) { 
Counters.Counter storage nonce = _nonces[owner]; 


current = nonce.current(); 


nonce.increment(); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts/YieldBoxRebase. 
sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.9; 

pragma experimental ABIEncodervV2; 

import "./interfaces/IStrategy.sol"; 

import "@boringcrypto/boring-solidity/contracts/interfaces/IERC1155.sol"; 
import "@boringcrypto/boring-solidity/contracts/libraries/Base64.sol"; 
import "@boringcrypto/boring-solidity/contracts/libraries/BoringAddress.sol"; 
import "@boringcrypto/boring-solidity/contracts/libraries/BoringERC20.sol"; 
import "@boringcrypto/boring-solidity/contracts/Domain.sol"; 

import "./ERC1155TokenReceiver.sol"; 

import "./ERC1155.sol"; 

import "@boringcrypto/boring-solidity/contracts/BoringBatchable.sol"; 


import "@boringcrypto/boring-solidity/contracts/BoringFactory.sol"; 


library YieldBoxRebase { 
/// @notice Calculates the base value in relationship to ‘elastic’ and ‘total’. 
function toShares( 
uint256 amount, 
uint256 totalShares _, 
uint256 totalAmount, 
bool roundUp 
) internal pure returns (uint256 share) { 


// To prevent reseting the ratio due to withdrawal of all shares, we start with 


// 1 amount/1e8 shares already burned. This also starts with a 1 : 1e8 ratio which 

// functions like 8 decimal fixed point math. This prevents ratio attacks or inaccuracy 
// due to ‘gifting' or rebasing tokens. (Up to a certain degree) 

totalAmount++; 


totalShares_ += 1e8; 


// Calculte the shares using te current amount to share ratio 


share = (amount * totalShares_) / total[Amount; 


// Default is to round down (Solidity), round up if required 
if (roundUp && (share * totalAmount) / totalShares_ < amount) { 


share++; 


/// @notice Calculates the elastic value in relationship to `base` and ‘total’. 
function toAmount( 
uint256 share, 
uint256 totalShares _, 
uint256 totalAmount, 
bool roundUp 
) internal pure returns (uint256 amount) { 
// To prevent reseting the ratio due to withdrawal of all shares, we start with 
// 1 amount/1e8 shares already burned. This also starts with a 1 : 1e8 ratio which 
// functions like 8 decimal fixed point math. This prevents ratio attacks or inaccuracy 


// due to ‘gifting' or rebasing tokens. (Up to a certain degree) 


totalAmount++; 


totalShares_ += 1e8; 


// Calculte the amount using te current amount to share ratio 


amount = (share * totalAmount) / totalShares ; 


// Default is to round down (Solidity), round up if required 
if (roundUp && (amount * totalShares_) / totalAmount < share) { 


amount++; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts/YieldBoxURIBuild 
er.sol---- 

// SPDX-License-lIdentifier: MIT 

pragma solidity *0.8.9; 

import "@openzeppelin/contracts/utils/Strings.sol"; 

import "@boringcrypto/boring-solidity/contracts/libraries/Base64.sol"; 

import "@boringcrypto/boring-solidity/contracts/libraries/BoringERC20.sol"; 

import "./interfaces/lYieldBox.sol"; 


import "./NativeTokenFactory.sol"; 


// solhint-disable quotes 


contract YieldBoxURIBuilder { 
using BoringERC20 for IERC20; 
using Strings for uint256; 


using Base64 for bytes; 


struct AssetDetails { 
string tokenType; 
string name; 
string symbol; 


uint256 decimals; 


function name(Asset calldata asset, string calldata nativeName) external view returns 


(string memory) { 


if (asset.strategy == NO_STRATEGY) { 
return nativeName; 
} else { 
if (asset.tokenType == TokenType.ERC20) { 
IERC20 token = IERC20(asset.contractAddress); 
return string(abi.encodePacked(token.safeName(), " (", asset.strategy.name(), 
")")); 
} else if (asset.tokenType == TokenType.ERC1155) { 
return 
string( 
abi.encodePacked( 
string( 
abi.encodePacked( 
"ERC1155:", 
uint256(uint160(asset.contractAddress)).toHexString(20), 
Ai 


asset.tokenld.toString() 


i (5i 
asset.strategy.name(), 


mye 


); 
} else { 


return string(abi.encodePacked(nativeName, " (", asset.strategy.name(), ")")); 


function symbol(Asset calldata asset, string calldata nativeSymbol) external view returns 
(string memory) { 
if (asset.strategy == NO_STRATEGY) { 
return nativeSymbol; 
} else { 
if (asset.tokenType == TokenType.ERC20) { 
IERC20 token = IERC20(asset.contractAddress); 
return string(abi.encodePacked(token.safeSymbol(), " (", asset.strategy.name(), 
")")); 
} else if (asset.tokenType == TokenType.ERC1155) { 
return string(abi.encodePacked("ERC1155", " (", asset.strategy.name(), ")")); 
} else { 


return string(abi.encodePacked(nativeSymbol, " (", asset.strategy.name(), ")")); 


function decimals(Asset calldata asset, uint8 nativeDecimals) external view returns 
(uint8) { 
if (asset.tokenType == TokenType.ERC1155) { 
return O0; 


} else if (asset.tokenType == TokenType.ERC20) { 


IERC20 token = IERC20(asset.contractAddress); 
return token.safeDecimals(); 
} else { 


return nativeDecimals; 


function uri( 
Asset calldata asset, 
NativeToken calldata nativeToken, 
uint256 totalSupply, 
address owner 
) external view returns (string memory) { 
AssetDetails memory details; 
if (asset.tokenType == TokenType.ERC1155) { 
// Contracts can't retrieve URIs, so the details are out of reach 
details.tokenType = "ERC1155"; 
details.name = string( 
abi.encodePacked("ERC1155:", 
uint256(uintl160(asset.contractAddress)).toHexString(20), "/", asset.tokenld.toString()) 
); 
details.symbol = "ERC1155"; 
} else if (asset.tokenType == TokenType.ERC20) { 
IERC20 token = IERC20(asset.contractAddress); 
details = AssetDetails("ERC20", token.safeName(), token.safeSymbol(), 


token.safeDecimals()); 


} else { 
// Native 
details.tokenType = "Native"; 
details. name = nativeToken.name; 
details.symbol = nativeToken.symbol; 


details.decimals = nativeToken.decimals: 


string memory properties = string( 
asset.tokenType != TokenType.Native 
?  abi.encodePacked(',"tokenAddress":"', 
uint256(uint160(asset.contractAddress)).toHexString(20), '"') 


: abi.encodePacked(',"totalSupply":', totalSupply.toString(), ',"fixedSupply":', 
owner == address(0) ? "true": "false") 


); 


return 
string( 
abi.encodePacked( 
"data:application/json;base64,", 
abi 
.encodePacked( 
'{"name":'", 
details.name, 
™ "symbol":", 


details.symbol, 


LELE] 
r 


asset.tokenType == TokenType.ERC1155 ? "" : ',"decimals":', 
asset.tokenType == TokenType.ERC1155 ? "" : details.decimals.toString(), 
',"properties":{"strategy":"', 
uint256(uint160(address(asset.strategy))).toHexString(20), 
™ "tokenType":"', 
details.tokenType, 
properties, 
asset.tokenType == TokenType.ERC1155 ? 
string(abi.encodePacked(',"tokenld":', asset.tokenld.toString())) : "", 
"zy" 
) 


.encode() 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\enums/YieldBoxT 
okenType.sol---- 
// SPDX-License-Identifier: MIT 


pragma solidity *0.8.9; 


/// @title TokenType 
/// @author BoringCrypto (@Boring_Crypto) 
/// @notice The YieldBox can hold different types of tokens: 
/// Native: These are ERC1155 tokens native to YieldBox. Protocols using YieldBox should use 
these is possible when simple token creation is needed. 
/// ERC20: ERC20 tokens (including rebasing tokens) can be added to the YieldBox. 
/// ERC1155: ERC1155 tokens are also supported. This can also be used to add YieldBox 
Native tokens to strategies since they are ERC1155 tokens. 
enum TokenType { 
Native, 
ERC20, 
ERC721, 
ERC1155, 


None 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\interfaces/IStrate 
gy.sol---- 

// SPDX-License-Identifier: MIT 

pragma solidity *0.8.9; 


pragma experimental ABIEncoderV2; 


import "../enums/YieldBoxTokenType.sol"; 


import "./lYieldBox.sol"; 


interface IStrategy { 
/// Each strategy only works with a single asset. This should help make implementations 
simpler and more readable. 
/// To safe gas a proxy pattern (YieldBox factory) could be used to deploy the same 


strategy for multiple tokens. 


/// 1t is recommended that strategies keep a small amount of funds uninvested (like 5%) 
to handle small withdrawals 


/// and deposits without triggering costly investing/divesting logic. 


III HHEAAAHHEHEHHEEHHEEFFAA AHA 
IIl ### Basic Information ### 


Il HEHEHE EHHEEHEHAEEHEEHEEAEEE 


/// Returns the address of the yieldBox that this strategy is for 


function yieldBox() external view returns (lYieldBox yieldBox_); 


/// Returns a name for this strategy 


function name() external view returns (string memory name); 


/// Returns a description for this strategy 


function description() external view returns (string memory description_); 


II HHHEHHFFHHHHEAEAEAHEAHEAHHHE 
/// ### Supported Token ### 


ll HHEHFEHHEHEHEEEHEEHEEHE 


/// Returns the standard that this strategy works with 


function tokenType() external view returns (TokenType tokenType ); 


/// Returns the contract address that this strategy works with 


function contractAddress() external view returns (address contractAddress ); 


/// Returns the tokenld that this strategy works with (for EIP1155) 
/// This is always O for EIP20 tokens 


function tokenld() external view returns (uint256 tokenld_); 


HL HHEAEAAHHHEHEHHEHRHEHEEHAAAAA AAA 
IIl ### Balance Information ### 


ll HEHEHE HHEEHEHEEEEHEEHEHEEEHEFE 


/// Returns the total value the strategy holds (principle + gain) expressed in asset token 


amount. 


/// This should be cheap in gas to retrieve. Can return a bit less than the actual, but MUST 
NOT return more. 

/// The gas cost of this function will be paid on any deposit or withdrawal onto and out of 
the YieldBox 

/// that uses this strategy. Also, anytime a protocol converts between shares and amount, 
this gets called. 


function currentBalance() external view returns (uint256 amount); 


/// Returns the maximum amount that can be withdrawn 


function withdrawable() external view returns (uint256 amount); 


/// Returns the maximum amount that can be withdrawn for a low gas fee 
/// When more than this amount is withdrawn it will trigger divesting from the actual 
strategy 
/// which will incur higher gas costs 


function cheapWithdrawable() external view returns (uint256 amount); 


I HHEAAHHHEHEHEHEHEHEFHFHAAAAAAHHEE 
IIl ### YieldBox Functions ### 


ll FHEEHEFHHEEHEHEAEEHEEHREAEEEE 


/// \s called by YieldBox to signal funds have been added, the strategy may choose to act 
on this 

/// When a large enough deposit is made, this should trigger the strategy to invest into the 
actual 


/// strategy. This function should normally NOT be used to invest on each call as that 


would be costly 

/// for small deposits. 

/// \f the strategy handles native tokens (ETH) it will receive it directly (not wrapped). It 
will be 

/// up to the strategy to wrap it if needed. 

/// Only accept this call from the YieldBox 


function deposited(uint256 amount) external; 


/// \s called by the YieldBox to ask the strategy to withdraw to the user 
/// When a strategy keeps a little reserve for cheap withdrawals and the requested 

withdrawal goes over this amount, 

/// the strategy should divest enough from the strategy to complete the withdrawal and 
rebalance the reserve. 

/// \f the strategy handles native tokens (ETH) it should send this, not a wrapped version. 

/// With some strategies it might be hard to withdraw exactly the correct amount. 

/// Only accept this call from the YieldBox 


function withdraw(address to, uint256 amount) external; 


IStrategy constant NO_STRATEGY = IStrategy(address(0)); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\interfaces/IWrap 
pedNative.sol---- 

// SPDX-License-ldentifier: MIT 

pragma solidity *0.8.9; 


import "@boringcrypto/boring-solidity/contracts/interfaces/IERC20.sol"; 


interface IWrappedNative is IERC20 { 


function deposit() external payable; 


function withdraw(uint256) external; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\interfaces/lYield 
Box.sol---- 

// SPDX-License-lIdentifier: MIT 

pragma solidity *0.8.9; 


pragma experimental ABIEncoderV2; 


import "../enums/YieldBoxTokenType.sol"; 


interface lYieldBox { 


function wrappedNative() external view returns (address wrappedNative); 


function assets(uint256 assetld) 
external 
view 
returns ( 
TokenType tokenType, 
address contractAddress, 
address strategy, 


uint256 tokenld 


function nativeTokens(uint256 assetld) 
external 
view 
returns ( 


string memory name, 


string memory symbol, 


uint8 decimals 


function owner(uint256 assetid) external view returns (address owner); 


function totalSupply(uint256 assetid) external view returns (uint256 totalSupply); 


function setApprovalForAsset( 
address operator, 
uint256 assetld, 
bool approved 


) external; 


function depositAsset( 
uint256 assetld, 
address from, 
address to, 
uint256 amount, 
uint256 share 


) external returns (uint256 amountOut, uint256 shareOut); 


function withdraw( 
uint256 assetld, 
address from, 


address to, 


uint256 amount, 
uint256 share 


) external returns (uint256 amountOut, uint256 shareOut); 


function transfer( 
address from, 
address to, 
uint256 assetld, 
uint256 share 


) external; 


function batchTransfer( 
address from, 
address to, 
uint256[] calldata assetlids , 
uint256[] calldata shares _ 


) external; 


function transferMultiple( 
address from, 
address[] calldata tos, 
uint256 assetld, 
uint256[] calldata shares 


) external; 


function toShare( 


uint256 assetld, 
uint256 amount, 
bool roundUp 


) external view returns (uint256 share); 


function toAmount( 
uint256 assetld, 
uint256 share, 
bool roundUp 


) external view returns (uint256 amount); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\mocks/ERC1155 
Mock.sol---- 

// SPDX-License-Identifier: MIT 

pragma solidity *0.8.9; 


import "../ERC1155.sol"; 


contract ERC1155Mock is ERC1155 { 
function mint( 
address to, 
uint256 id, 
uint256 amount 
) public { 


_mint(to, id, amount); 


function burn( 
address from, 
uint256 id, 
uint256 amount 
) public { 


_burn(from, id, amount); 


function transferSingle( 
address from, 


address to, 


uint256 id, 
uint256 value 
) public { 


_transferSingle(from, to, id, value); 


function transferBatch( 
address from, 
address to, 
uint256[] calldata ids, 
uint256[] calldata values 
) public { 


_transferBatch(from, to, ids, values); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\mocks/ERC1155 
ReceiverMock.sol---- 

// SPDX-License-Identifier: MIT 

pragma solidity *0.8.9; 


import "../ERC1155.sol"; 


contract ERC1155ReceiverMock is IERC1155TokenReceiver { 
address public sender; 
address public operator; 
address public from; 
uint256 public id; 
uint256[] public ids; 
uint256 public value; 
uint256[] public values; 


bytes public data; 


uint256 public fromBalance; 


function onERC1155Received( 
address operator, 
address from, 
uint256 _id, 
uint256 value, 
bytes calldata data 
) external override returns (bytes4) { 


sender = msg.sender; 


bytes4(keccak256("onERC1155Received(address,address,uint256,uint256,bytes)")); 


} 


operator = operator; 


from = _from; 


value = value; 


data = data; 


fromBalance = ERC1155(sender).balanceOf(from, id); 


function onERC1155BatchReceived( 


address operator, 
address from, 

uint256[] calldata _ids, 
uint256[] calldata values, 


bytes calldata_ data 


) external override returns (bytes4) { 


sender = msg.sender; 
operator = _operator; 
from = _from; 

ids = _ids; 

values = _values; 
data = data; 


if (ids.length > 0) { 


fromBalance = ERC1155(sender).balanceOf(from, 


ids[0]); 


return 


return 


bytes4(keccak256("onERC1155BatchReceived(address,address,uint256[],uint256[],bytes)")) 


function returnToken() external { 


ERC1155(sender).safeTransferFrom(address(this), from, id, value, ""); 


function returnTokens() external { 


ERC1155(sender).safeBatchTransferFrom(address(this), from, ids, values, ""); 


contract ERC1155BrokenReceiverMock is IERC1155TokenReceiver { 
function onERC1155Received( 
address, 
address, 
uint256, 
uint256, 
bytes calldata 
) external pure override returns (bytes4) { 


return bytes4(keccak256("wrong")); 


function onERC1155BatchReceived( 
address, 
address, 
uint256[] calldata, 
uint256[] calldata, 
bytes calldata 
) external pure override returns (bytes4) { 


return bytes4(keccak256("wrong")); 


contract ERC1155RevertingReceiverMock is IERC1155TokenReceiver { 
function onERC1155Received( 
address, 
address, 
uint256, 
uint256, 
bytes calldata 
) external pure override returns (bytes4) { 


revert("Oops"); 


function onERC1155BatchReceived( 
address, 


address, 


uint256[] calldata, 
uint256[] calldata, 
bytes calldata 
) external pure override returns (bytes4) { 


revert("Oops"); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\mocks/ERC1155 
StrategyMock.sol---- 

// SPDX-License-lIdentifier: MIT 

pragma solidity *0.8.9; 


pragma experimental ABIEncoderV2; 


import "@boringcrypto/boring-solidity/contracts/interfaces/IERC1155.sol"; 
import "../enums/YieldBoxTokenType.sol"; 
import "../interfaces/IStrategy.sol"; 


import "../ERC1155TokenReceiver.sol"; 


// solhint-disable const-name-snakecase 


// solhint-disable no-empty-blocks 


contract ERC1155StrategyMock is IStrategy, ERC1155TokenReceiver { 
string public constant override name = "ERC1155StrategyMock"; 


string public constant override description = "Mock Strategy for testing"; 


TokenType public constant override tokenType = TokenType.ERC1155; 


address public immutable override contractAddress; 


uint256 public immutable override tokenld; 


lYieldBox public immutable yieldBox; 


constructor( 


lYieldBox yieldBox_, 


address token, 
uint256 tokenld_ 
){ 
yieldBox = yieldBox_; 
contractAddress = token; 


tokenld = tokenld_; 


/// Returns the total value the strategy holds (principle + gain) expressed in asset token 

amount. 
/// This should be cheap in gas to retrieve. Can return a bit less than the actual, but 

shouldn't return more. 

/// The gas cost of this function will be paid on any deposit or withdrawal onto and out of 
the YieldBox 

/// that uses this strategy. Also, anytime a protocol converts between shares and amount, 
this gets called. 

function currentBalance() public view override returns (uint256 amount) { 


return IERC1155(contractAddress).balanceOf(address(this), tokenld); 


/// Returns the maximum amount that can be withdrawn 
function withdrawable() external view override returns (uint256 amount) { 


return IERC1155(contractAddress).balanceOf(address(this), tokenld); 


/// Returns the maximum amount that can be withdrawn for a low gas fee 


/// When more than this amount is withdrawn it will trigger divesting from the actual 
strategy 
/// which will incur higher gas costs 
function cheapWithdrawable() external view override returns (uint256 amount) { 


return IERC1155(contractAddress).balanceOf(address(this), tokenld); 


/// \s called by YieldBox to signal funds have been added, the strategy may choose to act 
on this 

/// When a large enough deposit is made, this should trigger the strategy to invest into the 
actual 

/// strategy. This function should normally NOT be used to invest on each call as that 

would be costly 

/// for small deposits. 

/// Only accept this call from the YieldBox 


function deposited(uint256 amount) external override {} 


/// \s called by the YieldBox to ask the strategy to withdraw to the user 
/// When a strategy keeps a little reserve for cheap withdrawals and the requested 
withdrawal goes over this amount, 
/// the strategy should divest enough from the strategy to complete the withdrawal and 
rebalance the reserve. 
/// Only accept this call from the YieldBox 
function withdraw(address to, uint256 amount) external override { 


IERC1155(contractAddress).safeTransferFrom(address(this), to, tokenld, amount, ""); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\mocks/ERC20Mo 
ck.sol---- 

// SPDX-License-lIdentifier: MIT 

pragma solidity *0.8.9; 


import "@boringcrypto/boring-solidity/contracts/ERC20.sol"; 


contract ERC20Mock is ERC20 { 


uint256 public override totalSupply; 


constructor(uint256 _initialAmount) { 
// Give the creator all initial tokens 
balanceOf[msg.sender] = _initialAmount; 
// Update total supply 


totalSupply = _initialAmount; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\mocks/ERC20Str 
ategyMock.sol---- 

// SPDX-License-lIdentifier: MIT 

pragma solidity *0.8.9; 


pragma experimental ABIEncoderV2; 


import "@boringcrypto/boring-solidity/contracts/interfaces/IERC20.sol"; 
import "@boringcrypto/boring-solidity/contracts/libraries/BoringERC20.sol"; 
import "../enums/YieldBoxTokenType.sol"; 

import "../interfaces/IStrategy.sol"; 


import "../interfaces/lYieldBox.sol"; 


// solhint-disable const-name-snakecase 


// solhint-disable no-empty-blocks 


contract ERC20StrategyMock is IStrategy { 


using BoringERC20 for IERC20; 


string public constant override name = "ERC20StrategyMock"; 


string public constant override description = "Mock Strategy for testing"; 


TokenType public constant override tokenType = TokenType.ERC20; 


address public immutable override contractAddress; 


uint256 public constant override tokenld = 0; 


lYieldBox public immutable override yieldBox; 


constructor(lYieldBox yieldBox_, address token) { 
yieldBox = yieldBox_; 


contractAddress = token; 


/// Returns the total value the strategy holds (principle + gain) expressed in asset token 

amount. 
/// This should be cheap in gas to retrieve. Can return a bit less than the actual, but 

shouldn't return more. 

/// The gas cost of this function will be paid on any deposit or withdrawal onto and out of 
the YieldBox 

/// that uses this strategy. Also, anytime a protocol converts between shares and amount, 
this gets called. 

function currentBalance() public view override returns (uint256 amount) { 


return IERC20(contractAddress).balanceOf(address(this)); 


/// Returns the maximum amount that can be withdrawn 
function withdrawable() external view override returns (uint256 amount) { 


return IERC20(contractAddress).balanceOf(address(this)); 


/// Returns the maximum amount that can be withdrawn for a low gas fee 
/// When more than this amount is withdrawn it will trigger divesting from the actual 


strategy 


/// which will incur higher gas costs 
function cheapWithdrawable() external view override returns (uint256 amount) { 


return IERC20(contractAddress).balanceOf(address(this)); 


/// \s called by YieldBox to signal funds have been added, the strategy may choose to act 
on this 

/// When a large enough deposit is made, this should trigger the strategy to invest into the 
actual 

/// strategy. This function should normally NOT be used to invest on each call as that 

would be costly 

/// for small deposits. 

/// Only accept this call from the YieldBox 


function deposited(uint256 amount) external override {} 


/// \s called by the YieldBox to ask the strategy to withdraw to the user 
/// When a strategy keeps a little reserve for cheap withdrawals and the requested 
withdrawal goes over this amount, 
/// the strategy should divest enough from the strategy to complete the withdrawal and 
rebalance the reserve. 
/// Only accept this call from the YieldBox 
function withdraw(address to, uint256 amount) external override { 
if (contractAddress == yieldBox.wrappedNative()) {} else { 


IERC20(contractAddress).safeTransfer(to, amount); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\mocks/ERC721M 
ock.sol---- 

// SPDX-License-lIdentifier: MIT 

pragma solidity *0.8.9; 


import "@openzeppelin/contracts/token/ERC721/ERC721.sol"; 


contract ERC721Mock is ERC721 { 


constructor() ERC721("ERC721Mock", "ERCM") {} 


function mint( 
address to, 
uint256 id 
) public { 


_mint(to, id); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\mocks/ERC721St 
rategyMock.sol---- 

// SPDX-License-Identifier: MIT 

pragma solidity *0.8.9; 


pragma experimental ABIEncodervV2; 


import "@openzeppelin/contracts/token/ERC721/IERC721.sol"; 
import "../enums/YieldBoxTokenType.sol"; 

import "../interfaces/IStrategy.sol"; 

import "../interfaces/lYieldBox.sol"; 


import "../ERC721Receiver.sol"; 


// solhint-disable const-name-snakecase 


// solhint-disable no-empty-blocks 


contract ERC721StrategyMock is IStrategy, ERC721Receiver { 


string public constant override name = "ERC721StrategyMock"; 


string public constant override description = "Mock Strategy for testing"; 


TokenType public constant override tokenType = TokenType.ERC721; 


address public immutable override contractAddress; 


uint256 public immutable override tokenld; 


lYieldBox public immutable override yieldBox; 


constructor(lYieldBox yieldBox_, address token, uint256 tokenld_) { 


yieldBox = yieldBox_; 
contractAddress = token; 


tokenld = tokenld_; 


/// Returns the total value the strategy holds (principle + gain) expressed in asset token 

amount. 
/// This should be cheap in gas to retrieve. Can return a bit less than the actual, but 

shouldn't return more. 

/// The gas cost of this function will be paid on any deposit or withdrawal onto and out of 
the YieldBox 

/// that uses this strategy. Also, anytime a protocol converts between shares and amount, 
this gets called. 

function currentBalance() public view override returns (uint256 amount) { 


return IERC721(contractAddress).balanceOf(address(this)); 


/// Returns the maximum amount that can be withdrawn 
function withdrawable() external view override returns (uint256 amount) { 


return IERC721(contractAddress).balanceOf(address(this)); 


/// Returns the maximum amount that can be withdrawn for a low gas fee 
/// When more than this amount is withdrawn it will trigger divesting from the actual 
strategy 


/// which will incur higher gas costs 


function cheapWithdrawable() external view override returns (uint256 amount) { 


return IERC721(contractAddress).balanceOf(address(this)); 


/// \s called by YieldBox to signal funds have been added, the strategy may choose to act 
on this 

/// When a large enough deposit is made, this should trigger the strategy to invest into the 
actual 

/// strategy. This function should normally NOT be used to invest on each call as that 

would be costly 

/// for small deposits. 

/// Only accept this call from the YieldBox 


function deposited(uint256 amount) external override {} 


/// \s called by the YieldBox to ask the strategy to withdraw to the user 
/// When a strategy keeps a little reserve for cheap withdrawals and the requested 
withdrawal goes over this amount, 
/// the strategy should divest enough from the strategy to complete the withdrawal and 
rebalance the reserve. 
/// Only accept this call from the YieldBox 
function withdraw(address to, uint256) external override { 


IERC721(contractAddress).safeTransferFrom(address(this), to, tokenld); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\mocks/ExternalF 
unctionMock.sol---- 
// SPDX-License-Identifier: MIT 


pragma solidity *0.8.9; 


contract ExternalFunctionMock { 


event Result(uint256 output); 


function sum(uint256 a, uint256 b) external returns (uint256 c) { 
c =a + b; 


emit Result(c); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\mocks/Malicious 
MasterContractMock.sol---- 

// SPDX-License-lIdentifier: MIT 

pragma solidity *0.8.9; 

import "@boringcrypto/boring-solidity/contracts/interfaces/IMasterContract.sol"; 


import "../YieldBox.sol"; 


contract MaliciousMasterContractMock is IMasterContract { 
function init(bytes calldata) external payable override { 


return; 


function attack(YieldBox yieldBox) public { 


yieldBox.setApprovalForAll(address(this), true); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\mocks/MasterCo 
ntractFullCycleMock.sol---- 


// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.9; 


import "@boringcrypto/boring-solidity/contracts/interfaces/IMasterContract.sol"; 


import "../YieldBox.sol"; 


contract MasterContractFullCycleMock is IMasterContract { 
YieldBox public immutable yieldBox; 
address public deployer; 
address public token; 
address public erc1155; 
IStrategy public tokenStrategy; 
IStrategy public erc1155Strategy; 


IStrategy public ethStrategy; 


constructor(YieldBox _yieldBox) { 


yieldBox = _yieldBox; 


function init(bytes calldata data) external payable override { 
(deployer, token, erc1155, tokenStrategy, ercl1155Strategy, ethStrategy) = abi.decode( 
data, 


(address, address, address, |Strategy, IStrategy, IStrategy) 


); 


return; 


function run() public payable { 


yieldBox.deposit(TokenType.ERC20, token, tokenStrategy, 0, deployer, deployer, 1000, 


yieldBox.deposit(TokenType.ERC20, token, tokenStrategy, 0, deployer, deployer, O, 
1000_00000000); 
uint256 id = yieldBox.ids(TokenType.ERC20, token, tokenStrategy, 0); 
yieldBox.withdraw(id, deployer, deployer, 1000, 0); 


yieldBox.withdraw(id, deployer, deployer, 0, 1000 00000000); 


yieldBox.deposit(TokenType.ERC1155, erc1155, ercl1155Strategy, 42, deployer, 
deployer, 1000, 0); 
yieldBox.deposit(TokenType.ERC1155, erc1155, erc1155Strategy, 42, deployer, 
deployer, 0, 1000_ 00000000); 
id = yieldBox.ids(TokenType.ERC1155, erc1155, erc1155Strategy, 42); 
yieldBox.withdraw(id, deployer, deployer, 1000, 0); 


yieldBox.withdraw(id, deployer, deployer, 0, 1000 00000000); 


yieldBox.depositETH{ value: 1000 }(ethStrategy, deployer, 1000); 


yieldBox.withdraw(id + 1, deployer, deployer, 1000, 0); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\mocks/MasterCo 
ntractMock.sol---- 


// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.9; 


import "@boringcrypto/boring-solidity/contracts/interfaces/IMasterContract.sol"; 


import "../YieldBox.sol"; 


contract MasterContractMock is IMasterContract { 


YieldBox public immutable yieldBox; 


constructor(YieldBox _yieldBox) { 


yieldBox = _yieldBox; 


function deposit(uint256 id, uint256 amount) public { 


yieldBox.depositAsset(id, msg.sender, address(this), 0, amount); 


function setApproval() public { 


yieldBox.setApprovalForAll(msg.sender, true); 


function init(bytes calldata) external payable override { 


return; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\mocks/ReturnFal 
SeERC20Mock.sol---- 
// SPDX-License-ldentifier: MIT 


pragma solidity *0.8.9; 


// solhint-disable no-inline-assembly 


// solhint-disable not-rely-on-time 


// ReturnFalseERC20 does not revert on errors, it just returns false 
contract ReturnFalseERC20Mock { 

string public symbol; 

string public name; 

uint8 public immutable decimals; 

uint256 public totalSupply; 

mapping(address => uint256) public balanceOf; 

mapping(address => mapping(address => uint256)) public allowance; 


mapping(address => uint256) public nonces; 


event Transfer(address indexed from, address indexed to, uint256_ value); 


event Approval(address indexed owner, address indexed spender, uint256 value); 


constructor( 
string memory name_, 
string memory symbol, 
uint8 decimals _, 


uint256 supply 


){ 
name = name; 
symbol = symbol _; 
decimals = decimals ; 
totalSupply = supply; 


balanceOf[msg.sender] = supply; 


function transfer(address to, uint256 amount) public returns (bool success) { 
if (balanceOf[msg.sender] >= amount && balanceOf[to] + amount >= balanceOf[to]) { 
balanceOf[msg.sender] -= amount; 
balanceOf[to] += amount; 
emit Transfer(msg.sender, to, amount); 
return true; 
} else { 


return false; 


function transferFrom( 
address from, 
address to, 
uint256 amount 
) public returns (bool success) { 
if (balanceOf[from] >= amount && allowance[from][msg.sender] >= amount && 


balanceOf[to] + amount >= balanceOf[to]) { 


balanceOf[from] -= amount; 
allowance[from][msg.sender] -= amount; 
balanceOf[to] += amount; 
emit Transfer(from, to, amount); 
return true; 

} else { 


return false; 


function approve(address spender, uint256 amount) public returns (bool success) { 
allowance[msg.sender][spender] = amount; 
emit Approval(msg.sender, spender, amount); 


return true; 


// solhint-disable-next-line func-name-mixedcase 

function DOMAIN _SEPARATOR() public view returns (bytes32) { 
uint256 chainld; 
assembly { 


chainld := chainid() 


return keccak256(abi.encode(keccak256("EIP712Domain(uint256 chainld,address 
verifyingContract)"), chainld, address(this))); 


} 


function permit( 
address owner, 
address spender, 
uint256 value, 
uint256 deadline, 
uint8 v, 
bytes32 r, 
bytes32 s 
) external { 
require(block.timestamp < deadline, "ReturnFalseERC20: Expired"); 
bytes32 digest = keccak256( 
abi.encodePacked( 
"\x19\x01", 
DOMAIN_SEPARATOR(), 
keccak256( 


abi.encode( 


0x6e71edae12b1b97f4d1f60370fef10105fa2faae0126114a169c64845d6126c09, 
owner, 
spender, 
value, 
nonces[owner]++, 


deadline 


); 

address recoveredAddress = ecrecover(digest, v, r, S); 
require(recoveredAddress == owner, "ReturnFalseERC20: Invalid Sig"); 
allowance[owner][spender] = value; 


emit Approval(owner, spender, value); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\mocks/Reverting 
ERC20Mock.sol---- 
// SPDX-License-Identifier: MIT 


pragma solidity *0.8.9; 


// RevertingERC20 reverts on errors 
contract RevertingERC20Mock { 
string public symbol; 
string public name; 
uint8 public immutable decimals; 
uint256 public totalSupply; 
mapping(address => uint256) public balanceOf; 


mapping(address => mapping(address => uint256)) public allowance; 


event Transfer(address indexed from, address indexed to, uint256_ value); 


event Approval(address indexed owner, address indexed spender, uint256 value); 


constructor( 
string memory name_, 
string memory symbol, 
uint8 decimals _, 
uint256 supply 

){ 
name = name; 
symbol = symbol _; 


decimals = decimals ; 


totalSupply = supply; 
balanceOf[msg.sender] = supply; 


emit Transfer(address(0), msg.sender, supply); 


function transfer(address to, uint256 amount) public returns (bool success) { 
require(balanceOf[msg.sender] >= amount, "TokenB: balance too low"); 
require(amount >= 0, "TokenB: amount should be > 0"); 
require(balanceOf[to] + amount >= balanceOf[to], "TokenB: overflow detected"); 
balanceOf[msg.sender] -= amount; 
balanceOf[to] += amount; 
emit Transfer(msg.sender, to, amount); 


return true; 


function transferFrom( 
address from, 
address to, 
uint256 amount 

) public returns (bool success) { 
require(balanceOf[from] >= amount, "TokenB: balance too low"); 
require(allowance[from][msg.sender] >= amount, "TokenB: allowance too low"); 
require(amount >= 0, "TokenB: amount should be >= 0"); 
require(balanceOf[to] + amount >= balanceOf[to], "TokenB: overflow detected"); 
balanceOf[from] -= amount; 


allowance[from][msg.sender] -= amount; 


balanceOf[to] += amount; 
emit Transfer(from, to, amount); 


return true; 


function approve(address spender, uint256 amount) public returns (bool success) { 
allowance[msg.sender][spender] = amount; 
emit Approval(msg.sender, spender, amount); 


return true; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\mocks/SushiBar 
Mock.sol---- 

// SPDX-License-Identifier: MIT 

pragma solidity *0.8.9; 


import "@boringcrypto/boring-solidity/contracts/ERC20.sol"; 


// solhint-disable const-name-snakecase 


// SushiBar is the coolest bar in town. You come in with some Sushi, and leave with more! 
The longer you stay, the more Sushi you get. 
// This contract handles swapping to and from xSushi, SushiSwap's staking token. 
contract SushiBarMock is ERC20 { 
ERC20 public sushi; 
uint256 public override totalSupply; 
string public constant name = "SushiBar"; 


string public constant symbol = "xSushi"; 


// Define the Sushi token contract 
constructor(ERC20 sushi) { 


sushi = _sushi; 


// Enter the bar. Pay some SUSHIs. Earn some shares. 
// Locks Sushi and mints xSushi 
function enter(uint256 amount) public { 


// Gets the amount of Sushi locked in the contract 


uint256 totalSushi = sushi.balanceOf(address(this)); 
// Gets the amount of xSushi in existence 

uint256 totalShares = totalSupply; 

// If no xSushi exists, mint it 1:1 to the amount put in 
if (totalShares == 0 || totalSushi == 0) { 


_mint(msg.sender, amount); 


// Calculate and mint the amount of xSushi the Sushi is worth. The ratio will change 
overtime, 
// as xSushi is burned/minted and Sushi deposited + gained from fees / withdrawn. 
else { 
uint256 what = (_amount * totalShares) / totalSushi; 

_mint(msg.sender, what); 
} 
// Lock the Sushi in the contract 


sushi.transferFrom(msg.sender, address(this), amount); 


// Leave the bar. Claim back your SUSHIs. 
// Unclocks the staked + gained Sushi and burns xSushi 
function leave(uint256 share) public { 
// Gets the amount of xSushi in existence 
uint256 totalShares = totalSupply; 
// Calculates the amount of Sushi the xSushi is worth 
uint256 what = (_share * sushi.balanceOf(address(this))) / totalShares; 


_burn(msg.sender, _share); 


sushi.transfer(msg.sender, what); 


function mint(address account, uint256 amount) internal { 
totalSupply += amount; 
balanceOf[account] += amount; 


emit Transfer(address(0), account, amount); 


function burn(address account, uint256 amount) internal { 
balanceOf[account] -= amount; 
totalSupply -= amount; 


emit Transfer(account, address(0), amount); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\mocks/WETH9Mo 
ck.sol---- 
// SPDX-License-Identifier: GPL-3.0-only 


pragma solidity *0.8.9; 


contract WETH9Mock { 
string public name = "Wrapped Ether"; 
string public symbol = "WETH"; 


uint8 public decimals = 18; 


event Approval(address indexed src, address indexed guy, uint256 wad); 
event Transfer(address indexed src, address indexed dst, uint256 wad); 
event Deposit(address indexed dst, uint256 wad); 


event Withdrawal(address indexed src, uint256 wad); 


mapping(address => uint256) public balanceOf; 


mapping(address => mapping(address => uint256)) public allowance; 


/*fallback () external payable { 
deposit(); 

aa) 

function deposit() public payable { 
balanceOf[msg.sender] += msg.value; 


emit Deposit(msg.sender, msg.value); 


function withdraw(uint256 wad) public { 
require(balanceOf[msg.sender] >= wad, "WETH9: Error"); 
balanceOf[msg.sender] -= wad; 
bool success; 
(success, ) = msg.sender.call{ value: wad }(""); 


emit Withdrawal(msg.sender, wad); 


function totalSupply() public view returns (uint256) { 


return address(this).balance; 


function approve(address guy, uint256 wad) public returns (bool) { 
allowance[msg.sender][guy] = wad; 
emit Approval(msg.sender, guy, wad); 


return true; 


function transfer(address dst, uint256 wad) public returns (bool) { 


return transferFrom(msg.sender, dst, wad); 


function transferFrom( 
address src, 
address dst, 


uint256 wad 


) public returns (bool) { 


require(balanceOf[src] >= wad, "WETHS9: Error"); 


if (src != msg.sender && allowance[src][msg.sender] != type(uint256).max) { 


require(allowance[src][msg.sender] >= wad, "WETH9: Error"); 


allowance[src][msg.sender] -= wad; 


balanceOf[src] -= wad; 


balanceOf[dst] += wad; 


emit Transfer(src, dst, wad); 


return true; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\mocks/YieldBoxR 
ebaseMock.sol---- 

// SPDX-License-Identifier: MIT 

pragma solidity *0.8.9; 

pragma experimental ABIEncoderV2; 


import "../YieldBox.sol"; 


contract YieldBoxRebaseMock { 


using YieldBoxRebase for uint256; 


uint256 public totalAmount; 


uint256 public totalShares; 


function toShare(uint256 amount, bool roundUp) public view returns (uint256 share) { 


share = amount. toShares(totalShares, total[Amount, roundUp); 


function toAmount(uint256 share, bool roundUp) public view returns (uint256 amount) { 


amount = share. toAmount(totalShares, total[Amount, roundUp); 


function deposit(uint256 share, uint256 amount) public returns (uint256 shareOut, 
uint256 amountOut) { 
if (share == 0) { 
// value of the share may be lower than the amount due to rounding, that's ok 


share = amount._toShares(totalShares, total[Amount, false); 


} else { 


// amount may be lower than the value of share due to rounding, in that case, add 1 


to amount (Always round up) 


amount = share. toAmount(totalShares, totalAmount, true); 
} 
totalAmount += amount; 
totalShares += share; 


return (share, amount); 


function withdraw(uint256 share, uint256 amount) public returns (uint256 shareOut, 


uint256 amountOut) { 
if (Share == 0) { 


// value of the share paid could be lower than the amount paid due to rounding, in 


that case, add a share (Always round up) 
share = amount. _toShares(totalShares, totalAmount, true); 
} else { 
// amount may be lower than the value of share due to rounding, that's ok 


amount = share. toAmount(totalShares, totalAmount, false); 


totalAmount -= amount; 
totalShares -= share; 


return (share, amount); 


function gain(uint256 amount) public { 


totalAmount += amount; 


function lose(uint256 amount) public { 


totalAmount -= amount; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\samples/Escrow. 
sol---- 

// SPDX-License-lIdentifier: MIT 

pragma solidity *0.8.9; 


import "../YieldBox.sol"; 


struct Offer { 
address owner; 
uint256 assetFrom; 
uint256 assetTo; 
uint256 shareFrom; 
uint256 shareTo; 


bool closed; 


contract Escrow { 


YieldBox public yieldBox; 


constructor(YieldBox _yieldBox) { 


yieldBox = _yieldBox; 


Offer[] public offers; 


function make( 


uint256 assetFrom, 


uint256 assetTo, 
uint256 shareFrom, 
uint256 shareTo 

) public { 


offers.push(Offer(msg.sender, assetFrom, assetTo, shareFrom, shareTo, false)); 


function take(uint256 offerld) public { 
Offer memory offer = offers[offerld]; 
yieldBox.transfer(msg.sender, offer.owner, offer.assetFrom, offer.shareFrom); 
yieldBox.transfer(offer.owner, msg.sender, offer.assetTo, offer.shareTo); 


offers[offerld].closed = true; 


function cancel(uint256 offerld) public { 
require(offers[offerld].owner == msg.sender); 


offers[offerld].closed = true; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\samples/hellowo 
rld.sol---- 

// SPDX-License-lIdentifier: MIT 

pragma solidity *0.8.9; 


import "../YieldBox.sol"; 


// An example a contract that stores tokens in the YieldBox. 
// PS. This isn't good code, just kept it simple to illustrate usage. 
contract HelloWorld { 

YieldBox public immutable yieldBox; 


uint256 public immutable assetld; 


constructor(YieldBox _yieldBox, IERC20 token) { 
yieldBox = _yieldBox; 
assetlId = _yieldBox.registerAsset(TokenType.ERC20, address(token), 
IStrategy(address(0)), 0); 


} 


mapping(address => uint256) public yieldBoxShares; 


// Deposits an amount of token into the YieldBox. YieldBox shares are given to the 
HelloWorld contract and 
// assigned to the user in yieldBoxShares. 
// Don't deposit twice, you'll lose the first deposit ;) 
function deposit(uint256 amount) public { 


uint256 shares; 


(, shares) = yieldBox.depositAsset(assetld, msg.sender, address(this), amount, 0); 


yieldBoxShares[msg.sender] += shares; 


// This will return the current value in amount of the YieldBox shares. 

// Through a strategy, the value can go up over time, although in this example no strategy 
is selected. 

function balance() public view returns (uint256 amount) { 


return yieldBox.toAmount(assetld, yieldBoxShares[msg.sender], false); 


// Withdraw all shares from the YieldBox and receive the token. 
function withdraw() public { 
yieldBox.withdraw(assetld, address(this), msg.sender, 0, yieldBoxShares[msg.sender]); 


yieldBoxShares[msg.sender] = 0; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\samples/Options. 
Sol---- 

// SPDX-License-lIdentifier: MIT 

pragma solidity *0.8.9; 


import "../YieldBox.sol"; 


// Thanks to 


// - BookyPooBah - numToBytes 


// TODO: 
// Gas: Reduce where safe 
// Docs: Document every line in the contract 


// Check: Get extreme decimal examples, does exercise work ok? 


// price: this is the price of 10*18 base units of asset (ignoring decimals) as expressed in 


base units of currency (also ignoring decimals) 


// The frontend is responsible for making the simple calculation so the code can stay decimal 
agnostic and simple 

// For example, the price of 1 CVC (has 8 decimals) in the currency DAI (18 decimals): 

// 1 CVC = 0.0365 DAI 

// 1 * 8^10 base units of CVC = 0.0365 DAI (CVC has 8 decimals) 

// 1 * 8*10 base units of CVC = 0.0365 * 10*18 base units of DAI (DAI has 18 decimals) 

// 1 * 18^10 base units of CVC = 0.0365 * 10*28 base units of DAI (Multiply by 10^10 in 
this case to get to 10^18 base units) 


// Price = 0.0365 * 10*28 = 365000000000000000000000000 


// Design decisions and rationale 


// Use of block.timestamp 

// While blocknumber is more 'exact', block.timestamp is easier to understand for users and 
more predictable 

// So while it can be slightly manipulated by miners, this is not an issue on the timescales 


options operate at 


// solhint-disable not-rely-on-time 


library String { 
bytes1 private constant DOT = bytes1(uint8(46)); 


bytes1 private constant ZERO = bytes1(uint8(48)); 


function numToString(uint256 number, uint8 decimals) internal pure returns (string 
memory) { 
uint256 i; 
uint256 j; 
uint256 result; 
bytes memory b = new bytes(40); 
if (number == 0) { 
b[j++] = ZERO; 
} else { 
i = decimals + 18; 


do { 


uint256 num = number / 10**i; 
result = result * 10 + (num % 10); 
if (result > 0) { 
b[j++] = bytes1(uint8((num % 10) + uint8(ZERO))); 
if ((j > 1) && (number == num * 10**i) && (i <= decimals)) { 
break; 
} 
} else { 
if (i == decimals) { 
b[j++] = ZERO; 
b[j++] = DOT; 
} 
if (i < decimals) { 


b[j++] = ZERO; 


} 
if (decimals '= 0 && decimals == i && result > 0 && i > 0) { 


b[j++] = DOT; 


r 


} while (i >= 0); 


bytes memory out = new bytes(j); 
for (uint256 x = 0; x < j; x++) { 


out[x] = b[x]; 


} 


return string(out); 


struct Option { 
uint32 asset; // Allows for up to 4B assets 
uint32 currency; 
uint32 expiry; 
uint32 optionAssetld; 
uint32 minterAssetld; 


uint256 price; 


contract YieldOptions { 


YieldBox public yieldBox; 


constructor(YieldBox _yieldBox) { 


yieldBox = _yieldBox; 


Option[] public options; 


function create( 


uint32 asset, 


uint32 currency, 


uint128 price, 
uint32 expiry 
) public returns (uint256 optionld) { 
Option memory option; 
option.asset = asset; 
option.currency = currency; 
option.price = price; 
option.expiry = expiry; 
option.optionAssetld = yieldBox.createToken( 
"YieldOption", 
string( 


abi.encodePacked( 


yo, 
yieldBox.symbol(option.asset), 


yieldBox.symbol(option.currency), 


oul 
r 


String.numToString(option.price, yieldBox.decimals(option.currency)) 


option.minterAssetld = yieldBox.createToken( 
"YieldOptionMinter", 


string( 


abi.encodePacked( 


ym, 


yieldBox.symbol(option.asset), 


nyu 
5 r 


yieldBox.symbol(option.currency), 


n on 
LA 


String.numToString(option.price, yieldBox.decimals(option.currency)) 


optionld = options.length; 


options.push(option); 


event Mint(uint256 optionld, address indexed by, uint256 amount); 
event Withdraw(uint256 optionld, address indexed by, uint256 amount); 
event Exercise(uint256 optionid, address indexed by, uint256 amount); 


event Swap(uint256 optionid, address indexed by, uint256 assetAmount); 


[** 
* @dev Mint options. 
* @param amount The amount to mint expressed in units of currency. 


aL 


function mint( 
uint256 optionld, 
uint256 amount, 
address optionTo, 
address minterTo 
) public { 


Option storage option = options[optionld]; 


require(block.timestamp < option.expiry, "Option expired"); 


require(yieldBox.totalSupply(option.asset) == 0, "Options exercised, no minting"); 


// Step 1. Receive amount base units of currency. This is held in the contract to be paid 


when the option is exercised. 


yieldBox.transfer(msg.sender, address(this), option.asset, amount); 


// Step 2. Mint option tokens 


yieldBox.mint(option.optionAssetlid, optionTo, amount); 


// Step 3. Mint issue tokens 


yieldBox.mint(option.minterAssetld, minterTo, amount); 


// EVENTS 


emit Mint(optionld, msg.sender, amount); 


[** 


* @dev Withdraw from the pool. Asset and currency are withdrawn to the proportion in 
which they are exercised. 

* @param amount The amount to withdraw expressed in units of the option. 
*/ 
function withdraw( 

uint256 optionld, 

uint256 amount, 

address to 
) public { 


Option storage option = options[optionld]; 


// CHECKS 


require(block.timestamp >= option.expiry, "Option not yet expired"); 


// EFFECTS 
yieldBox.transfer( 
address(this), 
to, 
option.asset, 
(yieldBox.totalSupply(option.currency) * amount) / 
yieldBox.totalSupply(option.minterAssetld) 
); 
yieldBox.transfer( 
address(this), 
to, 


option.asset, 


(yieldBox.totalSupply(option.currency) * amount) / 
yieldBox.totalSupply(option.minterAssetld) 
); 


yieldBox.burn(option.minterAssetid, msg.sender, amount); 


// EVENTS 


emit Withdraw(optionld, msg.sender, amount); 


[** 
* @dev Withdraw from the pool before expiry by returning the options. 
* In this case Assets are withdrawn first if available. Only currency is returned if assets 
run to 0. 
* @param amount The amount to withdraw expressed in units of the option. 
*/ 
function withdrawEarly( 
uint256 optionld, 
uint256 amount, 
address to 
) public { 


Option storage option = options[optionld]; 


// CHECKS 


require(block.timestamp < option.expiry, "Option not yet expired"); 


// EFFECTS 


yieldBox.burn(option.optionAssetld, msg.sender, amount); 


yieldBox.burn(option.minterAssetid, msg.sender, amount); 


// Step 3. Receive from the asset pool 
uint256 assetAmount; 
uint256 currencyAmount; 


uint256 totalAsset = yieldBox.totalSupply(option.asset); 


if (totalAsset > 0) { 
// The amount fully in Assets 


assetAmount = (amount * 1e18) / option.price; 


// \f there aren't enough Assets in the contract, use as much as possible and get the 
rest from currency 
if (assetAmount > totalAsset) { 
currencyAmount = ((assetAmount - totalAsset) * option.price) / 1e18; 
assetAmount = totalAsset; 
} 
} else { 


currencyAmount = amount; 


yieldBox.transfer(address(this), to, option.currency, currencyAmount); 


yieldBox.transfer(address(this), to, option.asset, assetAmount); 


// EVENTS 


emit Withdraw(optionld, msg.sender, amount); 


[** 

* @dev Exercise options. 

* @param amount The amount to exercise expressed in units of currency. 
gi 

function exercise(uint256 optionld, uint256 amount) public { 


Option storage option = options[optionld]; 


require(block.timestamp < option.expiry, "Option has expired"); 


yieldBox.burn(option.optionAssetld, msg.sender, amount); 
yieldBox.transfer(msg.sender, address(this), option.asset, (amount * 1e18) / 
option.price); 


yieldBox.transfer(address(this), msg.sender, option.currency, amount); 


emit Exercise(optionid, msg.sender, amount); 


[** 
* @dev If some of the options are exercised, but the price of the asset goes back up, 
anyone can 
* swap the assets for the original currency. The main reason for this is that minted gets 
locked 


* once any option is exercised. When all assets are swapped back for currency, further 


minting 
* can happen again. 
* @param assetAmount The amount to swap. This is denominated in asset (NOT 
currency!) so it's always possible to swap ALL 
* assets, and rounding won't leave dust behind. 
*/ 
function swap( 
uint256 optionld, 
uint256 assetAmount, 
address to 
) public { 


Option storage option = options[optionld]; 


uint256 currencyAmount = (assetAmount * option.price) / 1e18; 
yieldBox.transfer(msg.sender, address(this), option.currency, currencyAmount); // 
TODO: Round up 
yieldBox.transfer(address(this), msg.sender, option.asset, assetAmount); 


yieldBox.mint(option.optionAssetid, to, currencyAmount); 


// EVENTS 


emit Swap(optionld, msg.sender, currencyAmount); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\samples/salary.s 
ol---- 

// SPDX-License-Identifier: MIT 

pragma solidity *0.8.9; 

pragma experimental ABIEncoderV2; 


import "../YieldBox.sol"; 


// solhint-disable not-rely-on-time 


// IDEA: Make changes to salaries, funder or recipient 


// IDEA: Enable partial withdrawals 


contract Salary is BoringBatchable { 


YieldBox public yieldBox; 


event LogCreate( 
address indexed funder, 
address indexed recipient, 
uint256 indexed assetld, 
uint32 cliffTimestamp, 
uint32 endTimestamp, 
uint32 cliffPercent, 
uint256 totalShare, 
uint256 salaryld 

); 


event LogWithdraw(uint256 indexed salaryld, address indexed to, uint256 share); 


event LogCancel(uint256 indexed salaryld, address indexed to, uint256 share); 


constructor(YieldBox _yieldBox) { 


yieldBox = _yieldBox; 


/// now clifffimestamp 


IU | | endTimestamp 


IIl] ----------------------------------------- 
struct UserSalary { 
// The funder of the salary, the one who can cancel it 
address funder; 
// The recipient of the salary 
address recipient; 


// The ERC20 token 


uint256 assetld; 

// The amount of share that the recipient has already withdrawn 
uint256 withdrawnShare; 

// The timestamp of the cliff (also the start of the slope) 

uint32 cliffTimestamp; 

// The timestamp of the end of vesting (the end of the slope) 
uint32 endTimestamp; 

// The cliff payout in percent of the share 

uint64 cliffPercent; 

// The total payout in share 


uint256 share; 


/// Array of all salaries managed by the contract 


UserSalary[] public salaries; 


function salaryCount() public view returns (uint256) { 


return salaries.length; 


/// Create a salary 
function create( 
address recipient, 
uint256 assetld, 
uint32 cliffTimestamp, 


uint32 endTimestamp, 


uint32 cliffPercent, 
uint128 amount 
) public returns (uint256 salaryld, uint256 share) { 
// Check that the end if after or equal to the cliff 
// \f they are equal, all share become payable at once, use this for a fixed term lockup 
require(clifffimestamp <= endTimestamp, "Salary: cliff > end"); 
// You cannot have a cliff greater than 100%, important check, without the contract will 
lose funds 


require(cliffPercent <= 1e18, "Salary: cliff too large"); 


// Fund this salary using the funder's YieldBox balance. Convert the amount to share, 
then transfer the share 
share = yieldBox.toShare(assetid, amount, false); 


yieldBox.transfer(msg.sender, address(this), assetld, share); 


salaryld = salaries.length; 

UserSalary memory salary; 
salary.funder = msg.sender; 
Salary.recipient = recipient; 
salary.assetld = assetld; 
Salary.clifffimestamp = clifffimestamp; 
salary.endTimestamp = endTimestamp; 
salary.cliffPercent = cliffPercent; 
salary.share = share; 


salaries.push(salary); 


emit LogCreate(msg.sender, recipient, assetld, cliffTimestamp, endTimestamp, 


cliffPercent, share, salaryld); 


} 


function available(UserSalary memory salary) internal view returns (uint256 share) { 
if (block.timestamp < salary.clifffimestamp) { 
// Before the cliff, none is available 
share = 0; 
} else if (block.timestamp >= salary.endTimestamp) { 
// After the end, all is available 
share = salary.share; 
} else { 


// In between, cliff is available, rest according to slope 


// Time that has passed since the cliff 
uint256 timeSinceCliff = block.timestamp - salary.cliffTimestamp; 
// Total time period of the slope 
uint256 timeSlope = salary.endTimestamp - salary.clifffimestamp; 
uint256 payablePercent = salary.cliffPercent; 
if (timeSinceCliff > 0) { 
// The percentage paid out during the slope 
uint256 slopePercent = 100 - salary.cliffPercent; 
// The percentage payable on the slope added to the cliff percentage 


payablePercent += ((slopePercent * timeSinceCliff) / timeSlope); 
} 


// The share payable 


share = (salary.share * payablePercent) / 100; 


// Remove any share already withdrawn 


share -= salary.withdrawnShare; 


// Get the number of share currently available for withdrawal by salaryld 
function available(uint256 salaryld) public view returns (uint256 share) { 


share = _available(salaries[salaryld]); 


function info(uint256 salaryld) 

public 

view 

returns ( 
address funder, 
address recipient, 
uint256 assetld, 
uint256 withdrawnAmount, 
uint32 cliffTimestamp, 
uint32 endTimestamp, 
uint64 cliffPercent, 
uint256 amount, 


uint256 availableAmount 


funder = salaries[salaryld].funder; 
recipient = salaries[salaryld].recipient; 
assetid = salaries[salaryld].assetld; 
clifffimestamp = salaries[salaryld].cliffTimestamp; 
endTimestamp = salaries[salaryld].endTimestamp; 
cliffPercent = salaries[salaryld].cliffPercent; 
amount = yieldBox.toAmount(salaries[salaryld].assetld, salaries[salaryld].share, false); 
withdrawnAmount = yieldBox.toAmount(salaries[salaryld].assetld, 
salaries[Salaryld].withdrawnShare, false); 
availableAmount = _ yieldBox.toAmount(salaries[salaryld].assetld, 
_available(salaries[salaryld]), false); 


} 


function withdraw(uint256 salaryld, address to) internal { 
uint256 pendingShare = _available(salaries[salaryld]); 
salaries[sSalaryld].withdrawnShare += pendingShare; 
yieldBox.transfer(address(this), to, salaries[salaryld].assetld, pendingShare); 


emit LogWithdraw(salaryld, to, pendingShare); 


// Withdraw the maximum amount possible for a salaryld 
function withdraw(uint256 salaryld, address to) public { 
// Only pay out to the recipient 
require(salaries[salaryld].recipient == msg.sender, "Salary: not recipient"); 


_withdraw(salaryld, to); 


// Modifier for functions only allowed by the funder 
modifier onlyFunder(uint256 salaryld) { 


require(salaries[salaryld].funder == msg.sender, "Salary: not funder"); 


// Cancel a salary, can only be done by the funder 
function cancel(uint256 salaryld, address to) public onlyFunder(salaryld) { 
// Pay the recipient all accrued funds 
_withdraw(salaryld, salaries[salaryld].recipient); 
// Return the rest to the funder 
uint256 shareLeft = salaries[salaryld].share - salaries[salaryld].withdrawnShare; 
yieldBox.transfer(address(this), to, salaries[salaryld].assetld, shareLeft); 


emit LogCancel(salaryld, to, shareLeft); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\samples/Tokeniz 
er.sol---- 

// SPDX-License-lIdentifier: MIT 

pragma solidity *0.8.9; 


import "../YieldBox.sol"; 


contract Tokenizer { 


YieldBox public yieldBox; 


constructor(YieldBox _yieldBox) { 


yieldBox = _yieldBox; 


Mapping(uint256 => uint256) tokenizedAsset; 


function deposit(uint256 sourceAsset, uint256 share) public { 
uint256 assetid = tokenizedAsset[sourceAsset]; 
if (assetlId == 0) { 
yieldBox.createToken( 
string(string.concat("Tokenized ", bytes(yieldBox.name(sourceAsset)))), 
string(string.concat("t", bytes(yieldBox.symbol(sourceAsset)))), 


18, 


yieldBox.transfer(msg.sender, address(this), sourceAsset, share); 


yieldBox.mint(assetld, msg.sender, share * 1e18); 


function withdraw(uint256 sourceAsset, uint256 share) public { 
uint256 assetid = tokenizedAsset[sourceAsset]; 
yieldBox.burn(assetld, msg.sender, share * 1e18); 


yieldBox.transfer(address(this), msg.sender, sourceAsset, share); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\samples/YieldAp 
p.sol---- 

// SPDX-License-lIdentifier: MIT 

pragma solidity *0.8.9; 

pragma experimental ABIEncoderV2; 


import "../YieldBox.sol"; 


contract YieldApp { 


using YieldBoxRebase for uint256; 


YieldBox public yieldBox; 


constructor(YieldBox _yieldBox) { 


yieldBox = _yieldBox; 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\samples/YieldSw 
ap.sol---- 

// SPDX-License-Identifier: GPL-3 

// Uniswap V2 for YieldBox (https://github.com/Uniswap/v2-core) 

pragma solidity ^0.8.9; 


import "../YieldBox.sol"; 


struct Pair { 
uint128 reserve0; 
uint128 reservel; 
uint32 asset0; 
uint32 asset1; 
uint32 IpAssetld; 


uint256 kLast; 


contract YieldSwap { 


using BoringMath for uint256; 


YieldBox public yieldBox; 


constructor(YieldBox _yieldBox) { 


yieldBox = _yieldBox; 


uint256 public constant MINIMUM_LIQUIDITY = 10 ** 3; 


Pair[] public pairs; 


mapping(uint256 => mapping(uint256 => uint256)) public pairLookup; 


event Mint(address indexed sender, uint256 amountO, uint256 amount1); 
event Burn(address indexed sender, uint256 amountO, uint256 amount1, address indexed 
to); 
event Swap(address indexed sender, uint256 amountOln, uint256 amountlin, uint256 
amountOOut, uint256 amount1Out, address indexed to); 


event Sync(uint112 reserveO, uint112 reservel); 


function create(uint32 assetO, uint32 asset1) public returns (uint256 pairld) { 
if (assetO > assetl1) { 


(assetO, asset1) = (assetl1, asset0O); 


uint32 lpAssetid = yieldBox.createToken("YieldBox LP Token", "YLP", 18, ""); 
pairld = pairs.length; 
pairLookup[assetO][asset1] = pairld; 


pairs.push(Pair(0O, 0, assetO, asset1, lpAssetld, 0)); 


function mint(uint256 pairld, address to) external returns (uint256 liquidity) { 


Pair storage pair = pairs[pairld]; 


uint256 balanced = yieldBox.balanceOf(address(this), pair.asset0O); 


uint256 balancel = yieldBox.balanceOf(address(this), pair.asset1); 
uint256 amountO = balanceoO - pair.reserveO; 


uint256 amount1 = balancel - pair.reservel1; 


uint256 totalSupply = yieldBox.totalSupply(pair.lpAssetid); 
if ( totalSupply == 0) { 
liquidity = Math.sqrt(amountO * amount1) - MINIMUM_LIQUIDITY; 
yieldBox.mint(pair.lpAssetid, address(0), MINIMUM_LIQUIDITY); 
} else { 
liquidity = Math.min((amountO * _totalSupply) / pair.reserveO, (amountl * 
_totalSupply) / pair.reservel); 
} 
require(liquidity > 0, "YieldSwap: Not enough mint"); 


yieldBox.mint(pair.lpAssetld, to, liquidity); 


pair.reserve0 = balance0.to128(); 


pair.reservel = balancel.to128(); 


function burn(uint256 pairld, address to) external returns (uint256 shareO, uint256 
Sharel) { 


Pair storage pair = pairs[pairld]; 


uint256 balanceO = yieldBox.balanceOf(address(this), pair.asset0O); 
uint256 balancel = yieldBox.balanceOf(address(this), pair.asset1); 


uint256 liquidity = yieldBox.balanceOf(address(this), pair.lpAssetld); 


uint256 totalSupply = yieldBox.totalSupply(pair.lpAssetid); 
ShareO = (liquidity * balanceO) / totalSupply; // using balances ensures pro-rata 
distribution 
Sharel = (liquidity * balancel) / totalSupply; // using balances ensures pro-rata 
distribution 
require(shareO > 0 && sharel > 0, "YieldSwap: Not enough"); 
yieldBox.burn(pair.lpAssetid, address(this), liquidity); 
yieldBox.transfer(address(this), to, pair.assetO, shareO); 


yieldBox.transfer(address(this), to, pair.assetl, sharel); 


pair.reserveO = yieldBox.balanceOf(address(this), pair.assetO).to128(); 


pair.reservel = yieldBox.balanceOf(address(this), pair.asset1).to128(); 


function swap(uint256 pairld, uint256 shareOOut, uint256 sharelOut, address to) external 


Pair storage pair = pairs[pairld]; 


require(shareOOut > 0 || share1Out > 0, "YieldSwap: Output too low"); 


require(shareOOut < pair.reserveO && sharelOut < pair.reservel, "YieldSwap: Liquidity 


too low"); 


yieldBox.transfer(address(this), to, pair.assetO, shareOOut); 


yieldBox.transfer(address(this), to, pair.assetl1, share1Out); 


uint256 balanced = yieldBox.balanceOf(address(this), pair.asset0O); 


uint256 balancel = yieldBox.balanceOf(address(this), pair.asset1); 


uint256 shareOIn = balanceO > pair.reserveO - shareOOut ? balanced - (pair.reserveO - 
shareOOut) : 0; 

uint256 sharelln = balancel > pair.reservel - sharelOut ? balancel - (pair.reservel - 
Share1Out) : 0; 

require(shareOIn > 0 || sharelln > 0, "YieldSwap: No input"); 


require(balanceO * balancel >= pair.reserveO * pair.reservel, "YieldSwap: K"); 


pair.reserveOd = balance0.to128(); 


pair.reservel = balancel.to128(); 


// force balances to match reserves 
function skim(uint256 pairld, address to) external { 


Pair storage pair = pairs[pairld]; 


yieldBox.transfer(address(this), to, pair.assetO, yieldBox.balanceOf(address(this), 
pair.assetO) - pair.reserveO); 

yieldBox.transfer(address(this), to, pair.assetl, yieldBox.balanceOf(address(this), 
pair.asset1) - pair.reservel); 


} 


// force reserves to match balances 


function sync(uint256 pairld) external { 


Pair storage pair = pairs[pairld]; 


pair.reserveO = yieldBox.balanceOf(address(this), pair.assetO).to128(); 


pair.reservel = yieldBox.balanceOf(address(this), pair.asset1).to128(); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\samples\lending/ 
lOracle.sol---- 
// SPDX-License-Identifier: MIT 


pragma solidity *0.8.9; 


interface lOracle { 
/// @notice Get the latest exchange rate. 
/// @param data Usually abi encoded, implementation specific data that contains 
information and arguments to & about the oracle. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return success if no valid (recent) rate is available, return false else true. 
/// @return rate The rate of the requested asset / pair / pool. 


function get(bytes calldata data) external returns (bool success, uint256 rate); 


/// @notice Check the last exchange rate without any state changes. 
/// @param data Usually abi encoded, implementation specific data that contains 
information and arguments to & about the oracle. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return success if no valid (recent) rate is available, return false else true. 
/// @return rate The rate of the requested asset / pair / pool. 


function peek(bytes calldata data) external view returns (bool success, uint256 rate); 


/// @notice Check the current spot exchange rate without any state changes. For oracles 
like TWAP this will be different from peek(). 
/// @param data Usually abi encoded, implementation specific data that contains 
information and arguments to & about the oracle. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return rate The rate of the requested asset / pair / pool. 


function peekSpot(bytes calldata data) external view returns (uint256 rate); 


/// @notice Returns a human readable (short) name about this oracle. 
/// @param data Usually abi encoded, implementation specific data that contains 
information and arguments to & about the oracle. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return (string) A human readable symbol name about this oracle. 


function symbol(bytes calldata data) external view returns (string memory); 


/// @notice Returns a human readable name about this oracle. 
/// @param data Usually abi encoded, implementation specific data that contains 
information and arguments to & about the oracle. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 


/// @return (string) A human readable name about this oracle. 


function name(bytes calldata data) external view returns (string memory); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\samples\lending/ 
ISwapper.sol---- 

// SPDX-License-ldentifier: MIT 

pragma solidity *0.8.9; 


import "@boringcrypto/boring-solidity/contracts/interfaces/IERC20.sol"; 


interface ISwapper { 
/// @notice Withdraws 'amountFrom' of token 'from' from the BentoBox account for this 
swapper. 
/// Swaps it for at least 'amountToMin' of token 'to’'. 
/// Transfers the swapped tokens of 'to' into the BentoBox using a plain ERC20 transfer. 
/// Returns the amount of tokens 'to' transferred to BentoBox. 
/// (The BentoBox skim function will be used by the caller to get the swapped funds). 
function swap( 
uint256 fromAssetld, 
uint256 toAssetld, 
address recipient, 
uint256 shareToMin, 
uint256 shareFrom 


) external returns (uint256 extraShare, uint256 shareReturned); 


/// @notice Calculates the amount of token 'from' needed to complete the swap 
(amountFrom), 
/// this should be less than or equal to amountFromMax. 
/// Withdraws 'amountFrom' of token 'from' from the BentoBox account for this swapper. 


/// Swaps it for exactly 'exactAmountTo' of token 'to'. 


/// Transfers the swapped tokens of 'to' into the BentoBox using a plain ERC20 transfer. 
/// Transfers allocated, but unused 'from' tokens within the BentoBox to 'refundTo' 
(amountFromMax - amountFrom). 
/// Returns the amount of 'from' tokens withdrawn from BentoBox (amountFrom). 
/// (The BentoBox skim function will be used by the caller to get the swapped funds). 
function swapExact( 
uint256 fromAssetld, 
uint256 toAssetld, 
address recipient, 
address refundTo, 
uint256 shareFromSupplied, 
uint256 shareToExact 


) external returns (uint256 shareUsed, uint256 shareReturned); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\samples\lending/ 
Lending.sol---- 

// SPDX-License-lIdentifier: UNLICENSED 

pragma solidity *0.8.9; 

pragma experimental ABIEncodervV2; 

import "@boringcrypto/boring-solidity/contracts/BoringOwnable.sol"; 

import "@boringcrypto/boring-solidity/contracts/ERC20.sol"; 

import "@boringcrypto/boring-solidity/contracts/interfaces/IMasterContract.sol"; 
import "@boringcrypto/boring-solidity/contracts/libraries/BoringRebase.sol"; 
import "@boringcrypto/boring-solidity/contracts/libraries/BoringERC20.sol"; 
import "./lOracle.sol"; 

import "./[Swapper.sol"; 


import "../../YieldBox.sol"; 


// Isolated Lending 


// Quick port, most certainly broken... very broken 


// Copyright (c) 2021, 2022 BoringCrypto - All rights reserved 


// Twitter: @Boring_Crypto 


// Special thanks to: 


// @OxKeno - for all his invaluable contributions 


// solhint-disable avoid-low-level-calls 


// solhint-disable no-inline-assembly 


// solhint-disable not-rely-on-time 


struct Market { 

uint32 collateral; 

uint32 asset; 

lOracle oracle; 

bytes oracleData; 

// Collateral 

uint256 totalCollateralShare; // Total collateral supplied is yieldBox shares 

mapping(address => uint256) userCollateralShare; // Amount of collateral per user in 

yieldBox shares 

// Assets 

uint256 totalAssetShares; 

// totalAssetFractions and userAssetFraction are stored as the ERC1155 totalSupply and 


balanceOf in yieldBox 


// Borrow 

// elastic = Total token amount to be repayed by borrowers 

// base = Total parts of the debt held by borrowers 

Rebase totalBorrow; 

// User balances 

mapping(address => uint256) userBorrowPart; 

/// @notice Exchange and interest rate tracking. 

/// This is 'cached' here because calls to Oracles can be very expensive. 
uint256 exchangeRate; 


uint64 interestPerSecond; 


uint64 lastAccrued; 


uint32 assetld; 


/// @title LendingPair 

contract LendingPair is IMasterContract { 
using RebaseLibrary for Rebase; 
using BoringERC20 for IERC20; 


using BoringMath for uint256; 


event LogExchangeRate(uint256 rate); 
event LogAccrue(uint256 accruedAmount, uint64 rate, uint256 utilization); 
event LogAddCollateral(address indexed from, address indexed to, uint256 share); 
event LogAddAsset(address indexed from, address indexed to, uint256 share, uint256 
fraction); 
event LogRemoveCollateral(address indexed from, address indexed to, uint256 share); 
event LogRemoveAsset(address indexed from, address indexed to, uint256 share, uint256 
fraction); 
event LogBorrow(address indexed from, address indexed to, uint256 amount, uint256 
part); 
event LogRepay(address indexed from, address indexed to, uint256 amount, uint256 
part); 
event LogLiquidate(uint256 indexed marketlid, address indexed user, uint256 borrowPart, 


address to, ISwapper swapper); 


// lmmutables (for MasterContract and all clones) 


YieldBox public immutable yieldBox; 


LendingPair public immutable masterContract; 


mapping(uint256 => Market) public markets; 


uint256[] public marketList; 


// Settings for the Medium Risk LendingPair 

uint256 private constant COLLATERIZATION_RATE = 75000; // 75% 

uint256 private constant COLLATERIZATION_RATE_PRECISION = 1e5; // Must be less than 
EXCHANGE_RATE_PRECISION (due to optimization in math) 

uint256 private constant MINIMUM _TARGET_UTILIZATION = 7e17; // 70% 

uint256 private constant MAXIMUM_TARGET_ UTILIZATION = 8e17; // 80% 

uint256 private constant UTILIZATION PRECISION = 1e18; 

uint256 private constant FULL_UTILIZATION = 1e18; 

uint256 private constant FULL_UTILIZATION MINUS MAX = FULL UTILIZATION - 

MAXIMUM_TARGET_UTILIZATION; 


uint256 private constant FACTOR_PRECISION = 1e18; 


uint64 private constant STARTING_INTEREST_ PER_SECOND = 317097920; // approx 1% 
APR 

uint64 private constant MINIMUM_INTEREST_PER_SECOND = 79274480; // approx 0.25% 
APR 

uint64 private constant MAXIMUM_INTEREST_PER_SECOND = 317097920000; // approx 
1000% APR 

uint256 private constant INTEREST ELASTICITY = 28800e36; // Half or double in 28800 


seconds (8 hours) if linear 


uint256 private constant EXCHANGE_RATE_PRECISION = 1e18; 


uint256 private constant LIQUIDATION MULTIPLIER = 112000; // add 12% 


uint256 private constant LIQUIDATION _MULTIPLIER_PRECISION = 1e5; 


/// @notice The constructor is only used for the initial master contract. Subsequent clones 
are initialised via ‘init’. 
constructor(YieldBox yieldBox_) { 
yieldBox = yieldBox_; 


masterContract = this; 


/// @notice No clones are used 
function init(bytes calldata) public payable override { 


revert("No clones"); 


function createMarket( 
uint32 collateral_, 
uint32 asset, 
lOracle oracle, 
bytes calldata oracleData_ 
) public { 
uint32 marketld = yieldBox.createToken( 


string(abi.encodePacked(yieldBox.name(collateral_), "/", yieldBox.name(asset_), "-", 


oracle_.name(oracleData_))), 
string(abi.encodePacked(yieldBox.symbol(collateral_), "/", yieldBox.symbol(asset_), 
"", oracle_.symbol(oracleData_))), 


18, 


Market storage market = markets[marketld]; 
(market.collateral, market.asset, market.oracle, market.oracleData) = (collateral_, 
asset_, oracle_, oracleData_); 
market.interestPerSecond = STARTING_INTEREST PER SECOND; // 1% APR, with 1e18 
being 100% 


market.assetiId = marketld; 


marketList.push(marketld); 


/// @notice Accrues the interest on the borrowed tokens. 
function accrue(uint256 marketld) public { 


Market storage market = markets[marketld]; 


// Number of seconds since accrue was called 
uint256 elapsedTime = block.timestamp - market.lastAccrued; 
if (elapsedTime == 0) { 


return; 


market.lastAccrued = block.timestamp.to64(); 


if (market.totalBorrow.base == 0) { 
// \f there are no borrows, reset the interest rate 
if (market.interestPerSecond != STARTING INTEREST PER SECOND) { 
market.interestPerSecond = STARTING_INTEREST PER_SECOND; 
emit LogAccrue(0, STARTING_INTEREST_PER_SECOND, 0); 
} 


return; 


uint256 extraAmount = 0; 


// Accrue interest 
extraAmount = (market.totalBorrow.elastic * market.interestPerSecond * elapsedTime) 
/1e18; 
market.totalBorrow.elastic += extraAmount.to128(); 
uint256 fullAssetAmount = _ yieldBox.toAmount(market.asset, 


yieldBox.totalSupply(marketld), false) + market.totalBorrow.elastic; 


// Update interest rate 
uint256 utilization = (market.totalBorrow.elastic * UTILIZATION PRECISION) / 
fullAssetAmount; 
if (utilization < MINIMUM_TARGET_ UTILIZATION) { 
uint256 underFactor = ((MINIMUM_TARGET_UTILIZATION - utilization) * 


FACTOR_PRECISION) / MINIMUM_TARGET_UTILIZATION; 


uint256 scale = INTEREST _ ELASTICITY + (underFactor * underFactor * elapsedTime); 
market.interestPerSecond = ((market.interestPerSecond * INTEREST ELASTICITY) / 


scale).to64(); 


if (market.interestPerSecond < MINIMUM_INTEREST PER_SECOND) { 
market.interestPerSecond = MINIMUM_INTEREST_PER_SECOND; // 0.25% APR 
minimum 
} 
} else if (utilization > MAXIMUM_TARGET_UTILIZATION) { 
uint256 overFactor = ((utilization - MAXIMUM _TARGET_UTILIZATION) * 
FACTOR_PRECISION) / FULL_UTILIZATION_MINUS_ MAX; 
uint256 scale = INTEREST ELASTICITY + (overFactor * overFactor * elapsedTime); 
uint256 newlnterestPerSecond = (market.interestPerSecond * scale) / 
INTEREST ELASTICITY; 
if (newlnterestPerSecond > MAXIMUM_INTEREST_PER_ SECOND) { 
newlnterestPerSecond = MAXIMUM_INTEREST_PER_SECOND; // 1000% APR 
maximum 
} 


market.interestPerSecond = newlInterestPerSecond.to64(); 


emit LogAccrue(extraAmount, market.interestPerSecond, utilization); 


[II @notice Concrete implementation of `isSolvent`. Includes a third parameter to allow 


caching “exchangeRate’. 


[Il @param _exchangeRate The exchange rate. Used to cache the `exchangeRate` 
between calls. 
function _isSolvent( 
uint256 marketld, 
address user, 
uint256 _exchangeRate 
) internal view returns (bool) { 


Market storage market = markets[marketld]; 


// accrue must have already been called! 

uint256 borrowPart = market.userBorrowPart[ user]; 

if (borrowPart == 0) return true; 

uint256 collateralShare = market.userCollateralShare[user]; 


if (collateralShare == QO) return false; 


return 
yieldBox.toAmount( 
market.collateral, 
((collateralShare * EXCHANGE _RATE_PRECISION) / 
COLLATERIZATION_RATE_PRECISION) * COLLATERIZATION_RATE, 
false 
)>= 
// Moved exchangeRate here instead of dividing the other side to preserve more 
precision 


(borrowPart * market.totalBorrow.elastic * _exchangeRate) / 


market.totalBorrow.base; 


modifier solvent(uint256 marketld) { 


r 


// TODO 


/// @notice Gets the exchange rate. l.e how much collateral to buy 1e18 asset. 
/// This function is Supposed to be invoked if needed because Oracle queries can be 
expensive. 
/// @return updated True if ~“exchangeRate’ was updated. 
/// @return rate The new exchange rate. 
function updateExchangeRate(uint256 marketid) public returns (bool updated, uint256 
rate) { 


Market storage market = markets[marketld]; 


(updated, rate) = market.oracle.get(market.oracleData); 


if (updated) { 
market.exchangeRate = rate; 
emit LogExchangeRate(rate); 
} else { 
// Return the old rate if fetching wasn't successful 


rate = market.exchangeRate; 


/// @notice Adds ‘collateral’ from msg.sender to the account ‘to’. 
/// @param marketld The id of the market. 
///| @param to The receiver of the tokens. 
/// @param share The amount of shares to add for ‘to’. 
function addCollateral( 
uint256 marketld, 
address to, 
uint256 share 
) public { 


Market storage market = markets[marketld]; 


market.userCollateralShare[to] += share; 
market.totalCollateralShare += share; 
yieldBox.transfer(msg.sender, address(this), market.collateral, share); 


emit LogAddCollateral(msg.sender, to, share); 


/// @dev Concrete implementation of ~removeCollateral’. 
function removeCollateral( 

uint256 marketld, 

address to, 

uint256 share 
) internal { 


Market storage market = markets[marketld]; 


market.userCollateralShare[msg.sender] -= share; 
market.totalCollateralShare -= share; 
yieldBox.transfer(address(this), to, market.collateral, share); 


emit LogRemoveCollateral(msg.sender, to, share); 


/// @notice Removes ‘share’ amount of collateral and transfers it to 
/// @param to The receiver of the shares. 
/// @param share Amount of shares to remove. 
function removeCollateral( 
uint256 marketld, 
address to, 
uint256 share 
) public solvent(marketld) { 
// accrue must be called because we check solvency 
accrue(marketld); 


_removeCollateral(marketld, to, share); 


/// @dev Concrete implementation of `addAsset`. 
function _addAsset( 

uint256 marketld, 

address to, 

uint256 share 
) internal returns (uint256 fraction) { 


Market storage market = markets[marketld]; 


‘to’. 


uint256 allShare = yieldBox.totalSupply(marketld) + yieldBox.toShare(market.asset, 
market.totalBorrow.elastic, true); 
fraction = allShare == 0 ? share : (share * yieldBox.totalSupply(marketld)) / allShare; 
if (yieldBox.totalSupply(marketld) + fraction < 1000) { 
return 0; 
} 
yieldBox.mint(marketld, to, share); 
yieldBox.transfer(msg.sender, to, marketld, share); 


emit LogAddAsset(msg.sender, to, share, fraction); 


//1 @notice Adds assets to the lending pair. 
/// @param to The address of the user to receive the assets. 
/// @param share The amount of shares to add. 
/// @return fraction Total fractions added. 
function addAsset( 
uint256 marketld, 
address to, 
uint256 share 
) public returns (uint256 fraction) { 
accrue(marketld); 


fraction = _addAsset(marketld, to, share); 


/// @dev Concrete implementation of ~removeAsset’. 


function removeAsset( 
uint256 marketld, 
address to, 
uint256 fraction 
) internal returns (uint256 share) { 


Market storage market = markets[marketld]; 


uint256 allShare = yieldBox.totalSupply(marketlid) + yieldBox.toShare(market.asset, 
market.totalBorrow.elastic, true); 
share = (fraction * allShare) / yieldBox.totalSupply(marketld); 
yieldBox.burn(marketld, msg.sender, fraction); 
require(yieldBox.totalSupply(marketld) >= 1000, "Kashi: below minimum"); 
emit LogRemoveAsset(msg.sender, to, share, fraction); 


yieldBox.transfer(address(this), to, marketld, share); 


/// @notice Removes an asset from msg.sender and transfers it to ‘to’. 
/// @param to The user that receives the removed assets. 
/// @param fraction The amount/fraction of assets held to remove. 
/// @return share The amount of shares transferred to ‘to’. 
function removeAsset( 
uint256 marketld, 
address to, 
uint256 fraction 
) public returns (uint256 share) { 


accrue(marketld); 


share = _removeAsset(marketld, to, fraction); 


/// @dev Concrete implementation of borrow’. 
function _borrow( 

uint256 marketld, 

address to, 

uint256 amount 
) internal returns (uint256 part, uint256 share) { 


Market storage market = markets[marketld]; 


(market.totalBorrow, part) = market.totalBorrow.add(amount, true); 
market.userBorrowPart[msg.sender] += part; 


emit LogBorrow(msg.sender, to, amount, part); 


share = yieldBox.toShare(market.asset, amount, false); 
require(yieldBox.totalSupply(marketld) >= 1000, "Kashi: below minimum"); 
market.totalAssetShares -= share; 


yieldBox.transfer(address(this), to, market.asset, share); 


/// @notice Sender borrows ‘amount’ and transfers it to ‘to’. 
/// @return part Total part of the debt held by borrowers. 

/// @return share Total amount in shares borrowed. 

function borrow( 


uint256 marketld, 


address to, 
uint256 amount 
) public solvent(marketld) returns (uint256 part, uint256 share) { 
updateExchangeRate(marketld); 
accrue(marketld); 


(part, share) = _borrow(marketld, to, amount); 


/// @dev Concrete implementation of “repay. 
function repay( 

uint256 marketld, 

address to, 

uint256 part 
) internal returns (uint256 amount) { 


Market storage market = markets[marketld]; 


(market.totalBorrow, amount) = market.totalBorrow.sub(part, true); 


market.userBorrowPart[to] -= part; 


uint256 share = yieldBox.toShare(market.asset, amount, true); 
yieldBox.transfer(msg.sender, address(this), market.asset, share); 
market.totalAssetShares += share; 


emit LogRepay(msg.sender, to, amount, part); 


/// @notice Repays a loan. 


/// @param to Address of the user this payment should go. 
[I| @param part The amount to repay. See “userBorrowPart’. 
/// @return amount The total amount repayed. 
function repay( 

uint256 marketld, 

address to, 

uint256 part 
) public returns (uint256 amount) { 

accrue(marketld); 


amount = _repay(marketld, to, part); 


/// @notice Handles the liquidation of users' balances, once the users' amount of collateral 
is too low. 
/// @param user The user to liquidate. 
/// @param maxBorrowPart Maximum (partial) borrow amounts to liquidate. 
/// @param to Address of the receiver if “swapper’ is zero. 
[I| @param swapper Contract address of the “ISwapper’ implementation. 
function liquidate( 
uint256 marketld, 
address user, 
uint256 maxBorrowPart, 
address to, 
ISwapper swapper 
) public { 


Market storage market = markets[marketld]; 


// Oracle can fail but we still need to allow liquidations 
(, uint256 _exchangeRate) = updateExchangeRate(marketld); 
accrue(marketld); 


require(!_ isSolvent(marketld, user, exchangeRate), "Lending: user solvent"); 


uint256 availableBorrowPart = market.userBorrowPart[ user]; 
uint256 borrowPart = maxBorrowPart > availableBorrowPart ? availableBorrowPart : 
maxBorrowPart; 
market.userBorrowPart[user] = availableBorrowPart - borrowPart; 
uint256 borrowAmount = market.totalBorrow.toElastic(borrowPart, false); 
uint256 collateralShare = yieldBox.toShare( 
market.collateral, 
((borrowAmount * LIQUIDATION MULTIPLIER * _exchangeRate) / 
LIQUIDATION _MULTIPLIER_PRECISION) * EXCHANGE RATE PRECISION, 


false 


market.userCollateralShare[user] -= collateralShare; 
emit LogRemoveCollateral(user, swapper == ISwapper(address(0)) ? to 


address(Swapper), collateralShare); 


emit LogRepay(swapper == ISwapper(address(0)) ? msg.sender : address(Swapper), 


user, borrowAmount, borrowPart); 


market.totalBorrow.elastic -= borrowAmount.to128(); 


market.totalBorrow.base -= borrowPart.to128(); 


market.totalCollateralShare -= collateralShare; 


uint256 borrowShare = yieldBox.toShare(market.asset, borrowAmount, true); 


// Flash liquidation: get proceeds first and provide the borrow after 
yieldBox.transfer(address(this), swapper == ISwapper(address(0)) ? to 
address(Swapper), market.collateral, collateralShare); 
if (Swapper != ISwapper(address(0))) { 
Swapper.swap(market.collateral, market.asset, msg.sender, borrowShare, 
collateralShare); 


} 


yieldBox.transfer(msg.sender, address(this), market.asset, borrowShare); 


market.totalAssetShares += borrowShare; 


emit LogLiquidate(marketlid, user, borrowPart, to, swapper); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\strategies/BaseB 
ufferStrategy.sol---- 

// SPDX-License-lIdentifier: MIT 

pragma solidity *0.8.9; 


pragma experimental ABIEncoderV2; 


import "@boringcrypto/boring-solidity/contracts/interfaces/IERC20.sol"; 
import "@boringcrypto/boring-solidity/contracts/libraries/BoringERC20.sol"; 
import "../BoringMath.sol"; 

import "../enums/YieldBoxTokenType.sol"; 


import "../interfaces/IStrategy.sol"; 


// solhint-disable const-name-snakecase 


// solhint-disable no-empty-blocks 


abstract contract BaseBufferStrategy is IStrategy { 


using BoringMath for uint256; 


lYieldBox public immutable yieldBox; 


constructor(lYieldBox _yieldBox) { 


yieldBox = _yieldBox; 


uint256 public constant MAX_RESERVE_PERCENT = 10e18; 


uint256 public constant TARGET _RESERVE_PERCENT = 5e18; 


// Implemented by base strategies for token type 


function reserve() internal view virtual returns (uint256 amount); 


function transfer(address to, uint256 amount) internal virtual; 


// Implemented by strategy 


function balancelnvested() internal view virtual returns (uint256 amount); 


function _invest(uint256 amount) internal virtual; 


function divestAll() internal virtual; 


function _divest(uint256 amount) internal virtual; 


function currentBalance() public view override returns (uint256 amount) { 


return _reserve() + _balancelnvested(); 


function withdrawable() external view override returns (uint256 amount) { 


return _reserve() + _balancelnvested(); 


function cheapWithdrawable() external view override returns (uint256 amount) { 


return _reserve(); 


/// \s called by YieldBox to signal funds have been added, the strategy may choose to act 
on this 

/// When a large enough deposit is made, this should trigger the strategy to invest into the 
actual 

/// strategy. This function should normally NOT be used to invest on each call as that 

would be costly 

/// for small deposits. 

/// Only accept this call from the YieldBox 

function deposited(uint256) public override { 


require(msg.sender == address(yieldBox), "Not YieldBox"); 


uint256 balance = _balancelnvested(); 


uint256 reserve = _reserve(); 


// Get the size of the reserve in % (1e18 based) 


uint256 reservePercent = (reserve * 100e18) / (balance + reserve); 


// Check if the reserve is too large, if so invest it 
if (reservePercent > MAX_RESERVE_PERCENT) { 


_invest(balance.muldiv(reservePercent - TARGET RESERVE PERCENT, 100e18, 


false)); 


/// \s called by the YieldBox to ask the strategy to withdraw to the user 


/// When a strategy keeps a little reserve for cheap withdrawals and the requested 
withdrawal goes over this amount, 
/// the strategy should divest enough from the strategy to complete the withdrawal and 
rebalance the reserve. 
/// Only accept this call from the YieldBox 
function withdraw(address to, uint256 amount) public override { 


require(msg.sender == address(yieldBox), "Not YieldBox"); 


uint256 balance = _balancelnvested(); 


uint256 reserve = _reserve(); 


if (reserve < amount) { 
if (balance + reserve == amount) { 
_divestAll(); 
_transfer(to, reserve()); 
} else { 
_divest(balance - (balance + reserve - 
amount).muldiv(TARGET_RESERVE_PERCENT, 100e18, false)); 


_transfer(to, amount); 


abstract contract BaseERC20BufferStrategy is BaseBufferStrategy { 


using BoringERC20 for IERC20; 


TokenType public constant tokenType = TokenType.ERC20; 


uint256 public constant tokenld = 0; 


address public immutable contractAddress; 


constructor(lYieldBox _yieldBox, address _contractAddress) BaseBufferStrategy(_yieldBox) 


contractAddress = _contractAddress; 


function _reserve() internal view override returns (uint256 amount) { 


return IERC20(contractAddress).safeBalanceOf(address(this)); 


function _transfer(address to, uint256 amount) internal override { 


IERC20(contractAddress).safeTransfer(to, amount); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\strategies/BaseS 
trategy.sol---- 

// SPDX-License-lIdentifier: MIT 

pragma solidity *0.8.9; 


pragma experimental ABIEncoderV2; 


import "@boringcrypto/boring-solidity/contracts/interfaces/IERC20.sol"; 
import "@boringcrypto/boring-solidity/contracts/libraries/BoringERC20.sol"; 
import "../enums/YieldBoxTokenType.sol"; 


import "../interfaces/IStrategy.sol"; 


// solhint-disable const-name-snakecase 


// solhint-disable no-empty-blocks 


abstract contract BaseStrategy is IStrategy { 


lYieldBox public immutable yieldBox; 


constructor(lYieldBox _yieldBox) { 


yieldBox = _yieldBox; 


function currentBalance() internal view virtual returns (uint256 amount); 


function currentBalance() public view virtual returns (uint256 amount) { 


return _currentBalance(); 


function withdrawable() external view virtual returns (uint256 amount) { 


return _currentBalance(); 


function cheapWithdrawable() external view virtual returns (uint256 amount) { 


return _currentBalance(); 


function deposited(uint256 amount) internal virtual; 


function deposited(uint256 amount) external { 


require(msg.sender == address(yieldBox), "Not YieldBox"); 


_deposited(amount); 


function withdraw(address to, uint256 amount) internal virtual; 


function withdraw(address to, uint256 amount) external { 


require(msg.sender == address(yieldBox), "Not YieldBox"); 


_withdraw(to, amount); 


abstract contract BaseERC20Strategy is BaseStrategy { 


TokenType public constant tokenType = TokenType.ERC20; 


uint256 public constant tokenld = 0; 


address public immutable contractAddress; 


constructor(lYieldBox _yieldBox, address contractAddress) BaseStrategy(_yieldBox) { 


contractAddress = _contractAddress; 


abstract contract BaseERC1155Strategy is BaseStrategy { 
TokenType public constant tokenType = TokenType.ERC1155; 
uint256 public immutable tokenld; 


address public immutable contractAddress; 


constructor(lYieldBox _yieldBox, address _contractAddress, uint256 
BaseStrategy(_yieldBox) { 
contractAddress = _contractAddress; 


tokenld = _tokenld; 


_tokenld) 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\strategies/ERC20 


WithoutStrategy.sol---- 
// SPDX-License-Identifier: MIT 
pragma solidity *0.8.9; 


pragma experimental ABIEncoderV2; 


import "@boringcrypto/boring-solidity/contracts/interfaces/IERC20.sol"; 


import "@boringcrypto/boring-solidity/contracts/libraries/BoringERC20.sol"; 


import "../enums/YieldBoxTokenType.sol"; 
import "../BoringMath.sol"; 


import "./BaseStrategy.sol"; 


// solhint-disable const-name-snakecase 


// solhint-disable no-empty-blocks 


contract ERC20WithoutStrategy is BaseERC20Strategy { 


using BoringERC20 for IERC20; 


constructor(lYieldBox _yieldBox, IERC20 token) 


address(token)) {} 


string public constant override name = "No strategy"; 


string public constant override description = "No strategy"; 


BaseERC20Strategy(_yieldBox, 


function currentBalance() internal view override returns (uint256 amount) { 


return IERC20(contractAddress).safeBalanceOf(address(this)); 


function _deposited(uint256 amount) internal override {} 


function _withdraw(address to, uint256 amount) internal override { 


IERC20(contractAddress).safeTransfer(to, amount); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\strategies/SushiS 
takingBufferStrategy.sol---- 

// SPDX-License-lIdentifier: MIT 

pragma solidity *0.8.9; 


pragma experimental ABIEncoderV2; 


import "@boringcrypto/boring-solidity/contracts/interfaces/IERC20.sol"; 
import "@boringcrypto/boring-solidity/contracts/libraries/BoringERC20.sol"; 
import "../enums/YieldBoxTokenType.sol"; 


import "./BaseBufferStrategy.sol"; 


// solhint-disable const-name-snakecase 


// solhint-disable no-empty-blocks 


interface ISushiBar is IERC20 { 


function enter(uint256 amount) external; 


function leave(uint256 share) external; 


contract SushiStakingBufferStrategy is BaseERC20BufferStrategy { 


using BoringMath for uint256; 


using BoringERC20 for IERC20; 


using BoringERC20 for ISushiBar; 


constructor(lYieldBox _yieldBox) BaseERC20BufferStrategy(_yieldBox, address(sushi)) {} 


string public constant override name = "xSUSHI-Buffered"; 
string public constant override description = "Stakes SUSHI into the SushiBar for xSushi 


with a buffer"; 


IERC20 private constant sushi 
IERC20(0x6B3595068778DD592e39A122f4f5a5cFO9C9O0FE2); 
ISushiBar private constant sushiBar = 


ISushiBar(0x8798249c2E607446EfB7Ad49eC89dD1865Ff4272); 


uint256 private _balance; 


function balancelnvested() internal view override returns (uint256 amount) { 
uint256 sushilnBar = sushi.safeBalanceOf(address(sushiBar)); 
uint256 xSushiBalance = sushiBar.safeBalanceOf(address(this)); 


return xSushiBalance.muldiv(sushilnBar, sushiBar.safeTotalSupply(), false); 


function _invest(uint256 amount) internal override { 


sushiBar.enter(amount); 


function divestAll() internal override { 


sushiBar.leave(sushiBar.balanceOf(address(this))); 


function divest(uint256 amount) internal override { 


uint256 totalShares = sushiBar.totalSupply(); 


uint256 totalSushi = sushi.balanceOf(address(sushiBar)); 


uint256 shares = (amount * totalShares) / totalSushi; 


sushiBar.leave(shares); 


----- E:/Train/makePDF/v1\tapioca-sdk-main\src\contracts\YieldBox\contracts\strategies/SushiS 
takingSimpleStrategy.sol---- 

// SPDX-License-lIdentifier: MIT 

pragma solidity *0.8.9; 


pragma experimental ABIEncoderV2; 


import "@boringcrypto/boring-solidity/contracts/interfaces/IERC20.sol"; 
import "@boringcrypto/boring-solidity/contracts/libraries/BoringERC20.sol"; 
import "../enums/YieldBoxTokenType.sol"; 

import "../BoringMath.sol"; 


import "./BaseStrategy.sol"; 


// solhint-disable const-name-snakecase 


// solhint-disable no-empty-blocks 


interface ISushiBar is IERC20 { 


function enter(uint256 amount) external; 


function leave(uint256 share) external; 


contract SushiStakingStrategy is BaseERC20Strategy { 
using BoringERC20 for IERC20; 
using BoringERC20 for ISushiBar; 


using BoringMath for uint256; 


constructor(lYieldBox _yieldBox) BaseERC20Strategy(_yieldBox, address(sushi)) {} 


string public constant override name = "xSUSHI"; 


string public constant override description = "Stakes SUSHI into the SushiBar for xSushi"; 


IERC20 private constant sushi 
IERC20(0x6B3595068778DD592e39A122f4f5a5cFO9C9O0FE2); 
ISushiBar private constant sushiBar = 


ISushiBar(0x8798249c2E607446EfB7Ad49eC89dD1865Ff4272); 


function currentBalance() internal view override returns (uint256 amount) { 
uint256 sushiBalance = sushi.safeBalanceOf(address(this)); 
uint256 sushilnBar = sushi.safeBalanceOf(address(sushiBar)); 
uint256 xSushiBalance = sushiBar.safeBalanceOf(address(this)); 
return sushiBalance + xSushiBalance.muldiv(sushilnBar, sushiBar.safeTotalSupply(), 
false); 


} 


function deposited(uint256 amount) internal override { 


sushiBar.enter(amount); 


function _withdraw(address to, uint256 amount) internal override { 
uint256 totalSushi = sushi.safeBalanceOf(address(sushiBar)); 


uint256 totalxSushi = sushiBar.safeTotalSupply(); 


sushiBar.leave(amount.muldiv(totalxSushi, totalSushi, true)); 


sushi.safeTransfer(to, amount); 


----- E:/Train/makePDF/v1\YieldBox-master\certora\harness/DummyBoringAddress.sol---- 
// SPDX-License-Identifier: MIT 


pragma solidity *0.8.0; 


// solhint-disable no-inline-assembly 


import "../helpers/Receiver.sol"; 


library DummyBoringAddress { 
function isContract(address account) internal view returns (bool) { 
uint256 size; 
assembly { 
size := extcodesize(account) 
} 


return size > 0; 


function sendNative(address to, uint256 amount) internal { 
// solhint-disable-next-line avoid-low-level-calls 
// (bool success, ) = to.call{value: amount}(""); 
(bool success) = Receiver(payable(to)).sendTo{value:amount}(); 


require(success, "BoringAddress: transfer failed"); 


----- E:/Train/makePDF/v1\YieldBox-master\certora\harness/YieldBoxHarness.sol---- 
pragma solidity *0.8.9; 


pragma experimental ABIEncodervV2; 


import "../munged/YieldBox.sol"; 


import "../munged/AssetRegister.sol"; 


contract YieldBoxHarness is YieldBox { 


using YieldBoxRebase for uint256; 


constructor(IWrappedNative wrappedNative_, YieldBoxURIBuilder uriBuilder_) 


YieldBox(wrappedNative_, uriBuilder_) {} 


// all these functions can revert 
function getAssetArrayElement(uint256 assetid) public view returns (Asset memory) { 


return assets[assetld]; 


function getAssetsLength() public view returns (uint256) { 


return assets.length; 


function getAssetTokenType(uint256 assetid) public view returns (TokenType) { 
// return assets[assetld].tokenType; 


return assets.length <= assetld ? TokenType.None : assets[assetld].tokenType; 


function getAssetAddress(uint256 assetld) public view returns (address) { 
// return assets[assetlid].contractAddress; 


return assets.length <= assetid ? address(0) : assets[assetld].contractAddress; 


function getAssetStrategy(uint256 assetid) public view returns (IStrategy) { 
// return assets[assetld].strategy; 


return assets.length <= assetid ? NO_ STRATEGY : assets[assetld].strategy; 


function getAssetTokenld(uint256 assetid) public view returns (uint256) { 
// return assets[assetlid].tokenld; 


return assets.length <= assetld ? 0 : assets[assetld].tokenld; 


function getldFromlids(TokenType tokenType, address contractAddress, IStrategy 
strategy, uint256 tokenld) public view returns (uint256) { 


return ids[tokenType][contractAddress][strategy][tokenld]; 


function getAssetid(Asset memory asset) public view returns (uint256) { 


return ids[asset.tokenType][asset.contractAddress][asset.strategy ][asset.tokenld]; 


function assetsldentical(uint256 i, uint256 j) public view returns (bool) { 


if (i >= assets.length || j >= assets.length) { 
return false; 
} else { 
return 
assets[i].tokenType == assets[j].tokenType && 
assets[i].contractAddress == assets[j].contractAddress && 
assets[i].strategy == assets[j].strategy && 


assets[i].tokenld == assets[j].tokenld; 


function assetsldenticall(uint256 i, Asset memory asset) public view returns (bool) { 
if (i >= assets.length) { 
return false; 
} else { 
return 
assets[i].tokenType == asset.tokenType && 
assets[i].contractAddress == asset.contractAddress && 
assets[i].strategy == asset.strategy && 


assets[i].tokenld == asset.tokenld; 


function ethBalanceOfAdress(address addr) public returns (uint256) { 


return address(addr).balance; 


function toShares(uint256 amount, uint256 totalShares_, uint256 totalAmount, bool 
roundUp) public returns (uint256) { 


return amount._toShares(totalShares_, totalAmount, roundUp); 


function toAmount(uint256 share, uint256 totalShares_, uint256 totalAmount, bool 
roundUp) public returns (uint256) { 


return share. toAmount(totalShares_, total[Amount, roundUp); 


function getAssetBalance(Asset memory asset) public returns (uint256) { 


return asset.strategy.currentBalance(); 


function getAssetTotalSupply(Asset memory asset) public returns (uint256) { 
uint256 id = getAssetid(asset); 


return totalSupply[id]; 


----- E:/Train/makePDF/v1\YieldBox-master\certora\helpers/DummyERC1155A.sol---- 
// SPDX-License-ldentifier: agpl-3.0 
pragma solidity *0.8.0; 


import "./DummyERC1155Impl.sol"; 


contract DummyERC1155A is DummyMintableERC1155Impl {} 


----- E:/Train/makePDF/v1\YieldBox-master\certora\helpers/DummyERC1155B.sol---- 
// SPDX-License-ldentifier: agpl-3.0 
pragma solidity *0.8.0; 


import "./DummyERC1155Impl.sol"; 


contract DummyERC1155B is DummyMintableERC1155Impl {} 


----- E:/Train/makePDF/v1\YieldBox-master\certora\helpers/DummyERC1155Impl.sol---- 


pragma solidity *0.8.0; 


import "./SafeMath.sol"; 


/* 

A very incomplete implementation of ERC1155 that only foscuses on transferFrom and 
ownership tracking. 

Lacks support for approvals, "safe checks" on recipients, and some other sensible checks. 


Meant to be used as a stab; Expand it in a different contract if needed. 


Note: 
currently lacks total supply per tokenld 
lacks approval checks 
lacks the call to OnRecieved for the safeTransferFrom 
*/ 
contract DummyERC1155Impl { 


using SafeMath for uint256; 


string public name; 


string public symbol; 


// Mapping from token ID to account balances 


mapping(uint256 => mapping(address => uint256)) internal balances; 


// Mapping from account to operator approvals 


mapping(address => mapping(address => bool)) private _operatorApprovals; 


// Mapping from account to operator approvals 


// mapping(address => mapping(address => bool)) private _operatorApprovals; 


function balanceOf(address owner, uint256 tokenld) external view returns (uint256) { 
require(owner != address(0), "ERC1155: Zero Address is invalid"); 


return _balances[tokenld][owner]; 


//Not so Safe transfers 
function safeTransferFrom( 
address from, 
address to, 
uint256 id, 
uint256 amount, 
bytes calldata data 
) external { 


require(to != address(0)); 


// No approval checks 


_transferFrom(from, to, id, amount); 


// DOES NOT VERIFY 


function safeBatchTransferFrom( 
address from, 
address to, 
uint256[] calldata ids, 
uint256[] calldata amounts, 
bytes calldata data 

) external { 


require(to != address(0)); 


// No approval checks 


for (uint256 i = 0; i < ids.length; i++) { 


_transferFrom(from, to, ids[i], amounts[i]); 


// DOES NOT VERIFY 


function transferFrom(address from, address to, uint256 id, uint256 amount) internal { 
_balances[id][from] = _balances[id][from].sub(amount); 


_balances[id][to] = _balances[id][to].add(amount); 


function setApprovalForAll( 


address owner, 


address operator, 
bool approved 
) internal virtual { 
require(owner != operator, "ERC1155: setting approval status for self"); 


_operatorApprovals[owner][operator] = approved; 


contract DummyMintableERC1155Impl is DummyERC1155Impl { 


address public minter; 


modifier onlyMinter() { 


require (msg.sender == minter, "Mint callable by minter only"); 


// constructor (address minter) { 
// minter = _minter; 


I} 


function _mint( 
address to, 


uint256 id, 


uint256 value 
) internal { 
require(to != address(0), "No 0 address"); 


_balances[id][to] += value; 


function mint( 
address to, 
uint256 id, 
uint256 value 
) external onlyMinter() { 


_mint(to, id, value); 


----- E:/Train/makePDF/v1\YieldBox-master\certora\helpers/DummyERC20A.sol---- 
// SPDX-License-Identifier: agpl-3.0 
pragma solidity ^0.8.0; 


import "./DummyERC20Impl.sol"; 


enum TokenType { 
Native, 
ERC20, 
ERC721, 
ERC1155, 


None 


// contract DummyERC20A is DummyERC20Impl {} 


contract DummyERC20A is DummyBoringERC20Impl {} 


----- E:/Train/makePDF/v1\YieldBox-master\certora\helpers/DummyERC20B.sol---- 
// SPDX-License-Identifier: agpl-3.0 
pragma solidity ^0.8.0; 


import "./DummyERC20Impl.sol"; 


// contract DummyERC20B is DummyERC20Impl {} 


contract DummyERC20B is DummyBoringERC20Impl {} 


----- E:/Train/makePDF/v1\YieldBox-master\certora\helpers/DummyERC20Impl.sol---- 
// SPDX-License-lIdentifier: agpl-3.0 


pragma solidity *0.8.0; 


import "./SafeMath.sol"; 


// With approval checks 
contract DummyERC20Impl { 


using SafeMath for uint256; 


uint256 public totalSupply; 
mapping (address => uint256) public balances; 


mapping (address => mapping (address => uint256)) public allowance; 


string public name; 
string public symbol; 


uint public decimals; 


function myAddress() public returns (address) { 


return address(this); 


function balanceOf(address account) external view returns (uint256) { 
return balances[account]; 


} 


function transfer(address recipient, uint256 amount) external returns (bool) { 


require(msg.sender != address(0), "ERC20: transfer from the zero address"); 


require(recipient != address(0), "ERC20: transfer to the zero address"); 


balances[msg.sender] = balances[msg.sender].sub(amount); 
balances[recipient] = balances[recipient].add(amount); 
return true; 

} 

function approve(address spender, uint256 amount) external returns (bool) { 
allowance[msg.sender][spender] = amount; 


return true; 


function _transferFrom(address sender, address recipient, uint256 amount) internal 
returns (bool) { 

balances[sender] = balances[sender].sub(amount); 

balances[recipient] = balances[recipient].add(amount); 

// Update allowance 

if (sender != msg.sender) { 

allowance[sender][msg.sender] = allowance[sender][msg.sender].sub(amount); 
} 


return true; 


function transferFrom( 
address sender, 


address recipient, 


uint256 amount 

) external returns (bool) { 
require(recipient != address(0), "ERC20: transfer to the zero address"); 
require(sender != address(0), "ERC20: transfer from the zero address"); 


return _transferFrom(sender, recipient, amount); 


contract DummyMintableERC20Impl is DummyERC20Impl { 


address public minter; 


modifier onlyMinter() { 


require (msg.sender == minter, "Mint callable by minter only"); 


// constructor (address minter) { 
[| minter = _minter; 


II} 


function mint(address account, uint256 amount) external onlyMinter() { 


_mint(account, amount); 


function _mint(address user, uint256 amount) internal { 


totalSupply += amount; 


balances[user] += amount; 


contract DummyBoringERC20Impl is DummyMintableERC20Impl { 
/// Mock implementations for the non-standard extensions that boring tokens have 
II 


// Note: Lacks some real functionality (e.g. safeTransferFrom is identical to non-safe). 


// This can be controlled from CVL 


bool _mockShouldAllowAll; 


// This is meant to be some kind of approval mechanism, utulizing on-chain signing of 
approval messages. 
// The original functionality just reverts if not approved, so this mock can be controlled 
from CVL. 
function permit( 
address owner, 
address spender, 
uint256 value, 
uint256 deadline, 
uint8 v, 
bytes32 r, 
bytes32 s 


) external { 


require(_mockShouldAllowAll); 


allowance[owner][spender] = value; 


function safeTransferFrom( 
address sender, 
address recipient, 
uint256 amount 

) external returns (bool) { 


return _transferFrom(sender, recipient, amount); 


// Not sure if that's nessecary for the tool, 

// (but maybe helps with rules that want to check things dynamically specifically with that 
behavior) 

function changeBehavior(bool new_behavior) public { 


_mockShouldAllowAll = new_behavior; 


----- E:/Train/makePDF/v1\YieldBox-master\certora\helpers/DummyERC721A.sol---- 
// SPDX-License-Identifier: agpl-3.0 
pragma solidity ^0.8.0; 


import "./DummyERC721Impl.sol"; 


contract DummyERC721A is DummyERC721Impl {} 


----- E:/Train/makePDF/v1\YieldBox-master\certora\helpers/DummyERC721B.sol---- 
// SPDX-License-ldentifier: agpl-3.0 
pragma solidity *0.8.0; 


import "./DummyERC721Impl.sol"; 


contract DummyERC721B is DummyERC721Impl {} 


----- E:/Train/makePDF/v1\YieldBox-master\certora\helpers/DummyERC721Impl.sol---- 
// SPDX-License-Identifier: agpl-3.0 


pragma solidity ^0.8.0; 


import "./SafeMath.sol"; 


/* 
A very incomplete implementation of ERC721 that only foscuses on transferFrom and 
ownership tracking. 
Lacks support for approvals, lacks some sensible checks. 
Meant to be used as a stab; Expand it in a different contract when needed. 
*/ 
contract DummyERC721Impl { 


using SafeMath for uint256; 


string public name; 


string public symbol; 


// Mapping from token ID to owner address 


mapping(uint256 => address) private owners; 


// Mapping owner address to token count 


mapping(address => uint256) private balances; 


function balanceOf(address owner) external view returns (uint256) { 


require(owner != address(0), "ERC721: Zero Address is invalid"); 


return _balances[owner]; 


function ownerOf(uint256 tokenld) public view returns (address) { 
address owner = _owners|[tokenld]; 
require(owner != address(0), "ERC721: invalid token ID"); 


return owner; 


function transferFrom(address from, address to, uint256 tokenld) internal { 
require(_owners[tokenld] == from); 


require(to != address(0)); 


//mMsg.snder or approved checks would be here 


_balances[from] = _balances[from].sub(1); 


_balances[to] = _balances[to].add(1); 


_owners[tokenld] = to; 


function transferFrom(address from, address to, uint256 tokenld) external payable { 


_transferFrom(from, to, tokenld); 


function safeTransferFrom( 


address from, 

address to, 

uint256 tokenld 
) public virtual { 


_transferFrom(from, to, tokenld); 


----- E:/Train/makePDF/v1\YieldBox-master\certora\helpers/DummyWeth.sol---- 
// SPDX-License-Identifier: agpl-3.0 


pragma solidity ^0.8.9; 


import "./Receiver.sol"; 


[** 

* Dummy Weth token. 
*/ 

contract DummyWeth { 


uint256 t; 


mapping(address => uint256) b; 


mapping(address => mapping(address => uint256)) a; 


string public name; 
string public symbol; 


uint public decimals; 


function myAddress() public returns (address) { 


return address(this); 


function add(uint a, uint b) internal pure returns (uint256) { 
uint c = a + b; 


require (c >= a); 


return C; 

} 

function sub(uint a, uint b) internal pure returns (uint256) { 
require (a >= b); 


return a - b; 


function totalSupply() external view returns (uint256) { 


return t; 


function balanceOf(address account) external view returns (uint256) { 


return b[account]; 


function transfer(address recipient, uint256 amount) external returns (bool) { 
b[msg.sender] = sub(b[msg.sender], amount); 
b[recipient] = add(b[recipient], amount); 


return true; 


function allowance(address owner, address spender) external view returns (uint256) { 


return a[owner][spender]; 


function approve(address spender, uint256 amount) external returns (bool) { 


a[msg.sender][spender] = amount; 


return true; 


function transferFrom( 
address sender, 
address recipient, 
uint256 amount 
) external returns (bool) { 
b[sender] = sub(b[sender], amount); 
b[recipient] = add(b[recipient], amount); 
a[sender][msg.sender] = sub(a[sender][msg.sender], amount); 


return true; 


// WETH 
function deposit() external payable { 


b[msg.sender] += msg.value; 


function withdraw(uint256 amount) external { 
b[msg.sender] -= amount; 


Receiver(payable(msg.sender)).sendTo{value:amount}(); 


----- E:/Train/makePDF/v1\YieldBox-master\certora\helpers/Receiver.sol---- 


pragma solidity >=0.8.9; 


contract Receiver { 


fallback() external payable { } 


function sendTo() external payable returns (bool) { return true; } 


receive() external payable { } 


----- E:/Train/makePDF/v1\YieldBox-master\certora\helpers/SafeMath.sol---- 
// SPDX-License-ldentifier: agpl-3.0 


pragma solidity *0.8.0; 


library SafeMath { 


function add(uint256 a, uint256 b) internal pure returns (uint256) { 


uint256 c = a + b; 


require(c >= a); 


return C; 


function sub(uint256 a, uint256 b) internal pure returns (uint256) { 


require(b <= a); 


uint256 c =a- b; 


return C; 


function mul(uint256 a, uint256 b) internal pure returns (uint256) { 


return 0; 


uint256 c =a * b; 


require(c /a == b); 


return C; 


function div(uint256 a, uint256 b) internal pure returns (uint256) { 
// Solidity only automatically asserts when dividing by 0 
require(b > 0); 


uint256c = a / b; 


return C; 


----- E:/Train/makePDF/v1\YieldBox-master\certora\helpers\additionalStr/DummyERC1155Add 
Str.sol---- 
// SPDX-License-ldentifier: agpl-3.0 


pragma solidity *0.8.0; 


import "../DummyERC1155Impl.sol"; 


contract DummyERC1155AddStr is DummyMintableERC1155Impl {} 


----- E:/Train/makePDF/v1\YieldBox-master\certora\helpers\additionalStr/DummyERC20AddStr 
.SOl---- 

// SPDX-License-ldentifier: agpl-3.0 

pragma solidity *0.8.0; 


import "../DUMmMmyERC20Impl.sol"; 


// contract DummyERC20B is DummyERC20Impl {} 


contract DummyERC20AddStr is DummyBoringERC20Impl {} 


----- E:/Train/makePDF/v1\YieldBox-master\certora\helpers\additionalStr/DummyERC721AddSt 
r.SOl---- 
// SPDX-License-ldentifier: agpl-3.0 


pragma solidity *0.8.0; 


import "../DUmMMyERC721Impl.sol"; 


contract DummyERC721AddStr is DummyERC721Impl {} 


----- E:/Train/makePDF/v1\YieldBox-master\certora\helpers\mainStr/DummyERC1155Str.sol---- 
// SPDX-License-ldentifier: agpl-3.0 
pragma solidity *0.8.0; 


import "../DummyERC1155Impl.sol"; 


contract DummyERC1155Str is DummyMintableERC1155Impl {} 


----- E:/Train/makePDF/v1\YieldBox-master\certora\helpers\mainStr/DummyERC20Str.sol---- 
// SPDX-License-ldentifier: agpl-3.0 
pragma solidity *0.8.0; 


import "../DUMMyERC20Impl.sol"; 


// contract DummyERC20B is DummyERC20Impl {} 


contract DummyERC20Str is DummyBoringERC20Impl {} 


----- E:/Train/makePDF/v1\YieldBox-master\certora\helpers\mainStr/DummyERC721Str.sol---- 
// SPDX-License-ldentifier: agpl-3.0 
pragma solidity *0.8.0; 


import "../DUMMYyERC721Impl.sol"; 


contract DummyERC721Str is DummyERC721Impl {} 


----- E:/Train/makePDF/v1\YieldBox-master\contracts/AssetRegister.sol---- 

// SPDX-License-Identifier: MIT 

pragma solidity *0.8.9; 

import "./interfaces/IStrategy.sol"; 

import "@boringcrypto/boring-solidity/contracts/libraries/BoringAddress.sol"; 


import "./ERC1155.sol"; 


// An asset is a token + a strategy 
struct Asset { 
TokenType tokenType; 
address contractAddress; 
IStrategy strategy; 


uint256 tokenld; 


contract AssetRegister is ERC1155 { 


using BoringAddress for address; 


Mapping(address => mapping(address => mapping(uint256 => bool))) public 


isApprovedForAsset; 


event AssetRegistered( 
TokenType indexed tokenType, 
address indexed contractAddress, 
IStrategy strategy, 


uint256 indexed tokenld, 


uint256 assetid 


event ApprovalForAsset(address indexed sender, address indexed operator, uint256 


assetld, bool approved); 


// ids start at 1 so that id O means it's not yet registered 
mapping(TokenType => mapping(address => mapping(IStrategy => mapping(uint256 
=> uint256)))) public ids; 


Asset[] public assets; 


constructor() { 


assets.push(Asset(TokenType.None, address(0), NO_STRATEGY, 0)); 


function assetCount() public view returns (uint256) { 


return assets.length; 


function _registerAsset( 
TokenType tokenType, 
address contractAddress, 
IStrategy strategy, 
uint256 tokenld 

) internal returns (uint256 assetld) { 
// Checks 


assetid = ids[tokenType][contractAddress][strategy ][tokenld]; 


// If assetld is O, this is a new asset that needs to be registered 
if (assetlId == 0) { 
// Only do these checks if a new asset needs to be created 
require(tokenld == 0 || tokenType != TokenType.ERC20, "YieldBox: No tokenld for 
ERC20"); 
require( 
tokenType == TokenType.Native || 
(tokenType == strategy.tokenType() && contractAddress == 
strategy.contractAddress() && tokenld == strategy.tokenld()), 
"YieldBox: Strategy mismatch" 

); 

// \f a new token gets added, the isContract checks that this is a deployed contract. 
Needed for security. 

// Prevents getting shares for a future token whose address is known in advance. For 
instance a token that will be deployed with CREATE2 in the future or while the contract 
creation is 

// in the mempool 

require((tokenType == TokenType.Native && contractAddress == address(0)) || 


contractAddress.isContract(), "YieldBox: Not a token"); 


// Effects 
assetld = assets.length; 
assets.push(Asset(tokenType, contractAddress, strategy, tokenld)); 


ids[tokenType][contractAddress][strategy][tokenld] = assetld; 


// The actual URI isn't emitted here as per EIP1155, because that would make this 
call super expensive. 
emit URI("", assetid); 


emit AssetRegistered(tokenType, contractAddress, strategy, tokenld, assetld); 


function registerAsset(TokenType tokenType, address contractAddress, |IStrategy 
strategy, uint256 tokenld) public returns (uint256 assetld) { 
// Native assets can only be added internally by the NativeTokenFactory 
require( 
tokenType == TokenType.ERC20 || tokenType == TokenType.ERC721 || tokenType 
== TokenType.ERC1155, 
"AssetManager: cannot add Native" 
); 


assetld = _registerAsset(tokenType, contractAddress, strategy, tokenld); 


function setApprovalForAsset(address operator, uint256 assetid, bool approved) external 
virtual { 
require(assetld < assetCount(), "AssetManager: asset not valid"); 


isApprovedForAsset[msg.sender][operator][assetld] = approved; 


emit ApprovalForAsset(msg.sender, operator, assetld, approved); 


----- E:/Train/makePDF/v1\YieldBox-master\contracts/BoringMath.sol---- 
// SPDX-License-Identifier: MIT 


pragma solidity *0.8.9; 


library BoringMath { 
function to1l28(uint256 a) internal pure returns (uint128 c) { 
require(a <= type(uint128).max, "BoringMath: uintl28 Overflow"); 


c = uint128(a); 


function to64(uint256 a) internal pure returns (uint64 c) { 
require(a <= type(uint64).max, "BoringMath: uint64 Overflow"); 


c = uint64(a); 


function to32(uint256 a) internal pure returns (uint32 c) { 
require(a <= type(uint32).max, "BoringMath: uint32 Overflow"); 


c = uint32(a); 


function muldiv( 
uint256 value, 
uint256 mul, 
uint256 div, 
bool roundUp 


) internal pure returns (uint256 result) { 


result = (value * mul) / div; 
if (roundUp && (result * div) / mul < value) { 


result++; 


----- E:/Train/makePDF/v1\YieldBox-master\contracts/ERC1155.sol---- 
// SPDX-License-Identifier: MIT 


pragma solidity *0.8.9; 


import "@boringcrypto/boring-solidity/contracts/interfaces/IERC1155.sol"; 
import "@boringcrypto/boring-solidity/contracts/interfaces/IERC1155TokenReceiver.sol"; 


import "@boringcrypto/boring-solidity/contracts/libraries/BoringAddress.sol"; 


// Written by OreNoMochi (https://github.com/OreNoMochii), BoringCrypto 


contract ERC1155 is IERC1155 { 


using BoringAddress for address; 


// mappings 


mapping(address => mapping(address => bool)) public override isApprovedForAll; // map 
of operator approval 

mapping(address => mapping(uint256 => uint256)) public override balanceOf; // map of 
tokens owned by 


mapping(uint256 => uint256) public totalSupply; // totalSupply per token 


function supportsInterface(bytes4 interfacelD) public pure override returns (bool) { 
return 
interfacelD == this.supportsInterface.selector || // EIP-165 
interfacelD == 0xd9b67a26 || // ERC-1155 


interfacelD == 0x0e89341c; // EIP-1155 Metadata 


function balanceOfBatch(address[] calldata owners, uint256[] calldata ids) external view 
override returns (uint256[] memory balances) { 
uint256 len = owners.length; 


require(len == ids.length, "ERC1155: Length mismatch"); 


balances = new uint256[](len); 


for (uint256 i = 0; i < len; i++) { 


balances[i] = balanceOf[owners[i]][ids[i]]; 


function _mint(address to, uint256 id, uint256 value) internal { 


require(to != address(0), "No 0 address"); 


balanceOf[to][id] += value; 


totalSupply[id] += value; 


emit TransferSingle(msg.sender, address(0), to, id, value); 


function burn(address from, uint256 id, uint256 value) internal { 


require(from != address(0), "No 0 address"); 


balanceOf[from][id] -= value; 


totalSupply[id] -= value; 


emit TransferSingle(msg.sender, from, address(0), id, value); 


function _transferSingle(address from, address to, uint256 id, uint256 value) internal { 


require(to != address(0), "No 0 address"); 


balanceOf[from][id] -= value; 


balanceOf[to][id] += value; 


emit TransferSingle(msg.sender, from, to, id, value); 


function _transferBatch(address from, address to, uint256[] calldata ids, uint256[] 
calldata values) internal virtual { 


require(to != address(0), "No 0 address"); 


uint256 len = ids.length; 

for (uint256 i = 0; i < len; i++) { 
uint256 id = ids[i]; 
uint256 value = values[i]; 
balanceOf[from][id] -= value; 


balanceOf[to][id] += value; 


emit TransferBatch(msg.sender, from, to, ids, values); 


function requireTransferAllowed(address from, bool approved) internal view virtual { 
require(_ from == msg.sender || approved || isApprovedForAll[_from][msg.sender] == 
true, "Transfer not allowed"); 


} 


function safeTransferFrom(address from, address to, uint256 id, uint256 value, bytes 
calldata data) external override { 


_requireTransferAllowed(from, false); 


_transferSingle(from, to, id, value); 


if (to.isContract()) { 


require( 


IERC1155TokenReceiver(to).onERC1155Received(msg.sender, from, id, value, 


bytes4(keccak256("onERC1155Received(address,address,uint256,uint256,bytes)")), 


"Wrong return value" 


function safeBatchTransferFrom( 
address from, 
address to, 
uint256[] calldata ids, 
uint256[] calldata values, 
bytes calldata data 
) external override { 
require(ids.length == values.length, "ERC1155: Length mismatch"); 


_requireTransferAllowed(from, false); 


_transferBatch(from, to, ids, values); 


if (to.isContract()) { 


require( 


IERC1155TokenReceiver(to).onERC1155BatchReceived(msg.sender, from, ids, 


values, data) == 


bytes4(keccak256("onERC1155BatchReceived(address,address,uint256[],uint256[],bytes)")) 


"Wrong return value" 


function setApprovalForAll(address operator, bool approved) external virtual override { 


isApprovedForAll[msg.sender][operator] = approved; 


emit ApprovalForAll(msg.sender, operator, approved); 


function uri(uint256 /*assetld*/) external view virtual returns (string memory) { 


return ""; 


----- E:/Train/makePDF/v1\YieldBox-master\contracts/ERC1155TokenReceiver.sol---- 
// SPDX-License-Identifier: MIT 


pragma solidity *0.8.9; 


import "@boringcrypto/boring-solidity/contracts/interfaces/IERC1155TokenReceiver.sol"; 


contract ERC1155TokenReceiver is IERC1155TokenReceiver { 
// ERC1155 receivers that simple accept the transfer 
function onERC1155Received( 
address, 
address, 
uint256, 
uint256, 
bytes calldata 
) external pure override returns (bytes4) { 
return Oxf23a6e61; 
//bytes4(keccak256("onERC1155Received(address,address,uint256,uint256,bytes)")) 


} 


function onERC1155BatchReceived( 
address, 
address, 
uint256[] calldata, 
uint256[] calldata, 
bytes calldata 


) external pure override returns (bytes4) { 


return Oxbc197c81; 
//bytes4(keccak256("onERC1155BatchReceived(address,address,uint256[],uint256[],bytes)" 


)) 


----- E:/Train/makePDF/v1\YieldBox-master\contracts/ERC721Receiver.sol---- 
// SPDX-License-Identifier: MIT 


pragma solidity *0.8.9; 


import "@openzeppelin/contracts/token/ERC721/IERC721Receiver.sol"; 


contract ERC721Receiver is IERC721Receiver { 
function onERC721Received( 
address, //operator 
address, //from 
uint256, //tokenld 
bytes calldata //data 
) external pure returns (bytes4) { 
return 0x150b7a02; 
//bytes4(keccak256("onERC721Received(address,address,uint256,bytes)")) 
} 


----- E:/Train/makePDF/v1\YieldBox-master\contracts/ERC721TokenReceiver.sol---- 
// SPDX-License-Identifier: MIT 


pragma solidity *0.8.9; 


import "@boringcrypto/boring-solidity/contracts/interfaces/IERC721TokenReceiver.sol"; 


contract ERC721TokenReceiver is IERC721TokenReceiver { 
function onERC721Received(address, address, uint256, bytes calldata) external pure 
override returns (bytes4) { 
return 0x150b7a02; 
//bytes4(keccak256("onERC721Received(address,address,uint256,bytes)")) 
} 


----- E:/Train/makePDF/v1\YieldBox-master\contracts/NativeTokenFactory.sol---- 
// SPDX-License-Identifier: MIT 

pragma solidity *0.8.9; 

import "./AssetRegister.sol"; 


import "./BoringMath.sol"; 


struct NativeToken { 
string name; 
string symbol; 
uint8 decimals; 


string uri; 


/// @title NativeTokenFactory 

/// @author BoringCrypto (@Boring_Crypto) 

/// @notice The NativeTokenFactory is a token factory to create ERC1155 tokens. This is 
used by YieldBox to create 

/// native tokens in YieldBox. These have many benefits: 

/// - low and predictable gas usage 

/// - simplified approval 


/// - no hidden features, all these tokens behave the same 


contract NativeTokenFactory is AssetRegister { 


using BoringMath for uint256; 


mapping(uint256 => NativeToken) public nativeTokens; 


mapping(uint256 => address) public owner; 


mapping(uint256 => address) public pendingOwner; 


event TokenCreated(address indexed creator, string name, string symbol, uint8 decimals, 
uint256 tokenld); 
event OwnershipTransferred(uint256 indexed tokenld, address indexed previousOwner, 


address indexed newOwner); 


// *** MODIFIERS *** // 


/// Modifier to check if the msg.sender is allowed to use funds belonging to the 'from' 
address. 
/// \f 'from' is msg.sender, it's allowed. 
/// \f 'msg.sender' is an address (an operator) that is approved by 'from', it's allowed. 
modifier allowed(address from, uint256 _id) { 


_requireTransferAllowed(_from, isApprovedForAsset[_from][msg.sender][_id]); 


/// @notice Only allows the “owner to execute the function. 
/// @param tokenld The ‘tokenld* that the sender has to be owner of. 
modifier onlyOwner(uint256 tokenld) { 


require(msg.sender == owner[tokenld], "NTF: caller is not the owner"); 


/// @notice Transfers ownership to `newOwner`. Either directly or claimable by the new 
pending owner. 
/// Can only be invoked by the current ‘owner’. 
/// @param tokenld The “tokenld* of the token that ownership whose ownership will be 
transferred/renounced. 
/// @param newOwner Address of the new owner. 
/// @param direct True if “newOwner should be set immediately. False if ~“newOwner’ 
needs to use “claimOwnership . 
[I| @param renounce Allows the “newOwner to be ‘address(0) if ‘direct’ and 
‘renounce’ is True. Has no effect otherwise. 
function transferOwnership(uint256 tokenld, address newOwner, bool direct, bool 
renounce) public onlyOwner(tokenld) { 
if (direct) { 
// Checks 


require(newOwner != address(0) || renounce, "NTF: zero address"); 


// Effects 
emit OwnershipTransferred(tokenld, owner[tokenld], newOwner); 
owner[tokenld] = newOwner; 
pendingOwner[tokenld] = address(0); 
} else { 
// Effects 


pendingOwner[tokenld] = newOwner; 


/// @notice Needs to be called by `pendingOwner` to claim ownership. 
/// @param tokenld The “tokenld* of the token that ownership is claimed for. 
function claimOwnership(uint256 tokenld) public { 


address _pendingOwner = pendingOwner[tokenld]; 


// Checks 


require(msg.sender == _pendingOwner, "NTF: caller != pending owner"); 


// Effects 
emit OwnershipTransferred(tokenld, owner[tokenld], _pendingOwner); 
owner[tokenld] = _pendingOwner; 


pendingOwner[tokenld] = address(0); 


/// @notice Create a new native token. This will be an ERC1155 token. If later it's needed 
as an ERC20 token it can 
/// be wrapped into an ERC20 token. Native support for ERC1155 tokens is growing 
though. 
/// @param name The name of the token. 
/// @param symbol The symbol of the token. 
/// @param decimals The number of decimals of the token (this is just for display 
purposes). Should be set to 18 in normal cases. 
function createToken(string calldata name, string calldata symbol, uint8 decimals, string 


calldata uri) public returns (uint32 tokenld) { 


// To keep each Token unique in the AssetRegister, we use the assetld as the tokenld. 
So for native assets, the tokenld is always equal to the assetld. 

tokenld = assets.length.to32(); 

_registerAsset(TokenType.Native, address(0), NO STRATEGY, tokenld); 

// Initial supply is 0, use owner can mint. For a fixed supply the owner can mint and 

revoke ownership. 

// The msg.sender is the initial owner, can be changed after. 

nativeTokens[tokenld] = NativeToken(name, symbol, decimals, uri); 


owner[tokenld] = msg.sender; 


emit TokenCreated(msg.sender, name, symbol, decimals, tokenld); 
emit TransferSingle(msg.sender, address(0), address(0), tokenld, 0); 


emit OwnershipTransferred(tokenld, address(0), msg.sender); 


/// @notice The “owner can mint tokens. If a fixed supply is needed, the “owner should 
mint the totalSupply and renounce ownership. 

/// @param tokenld The token to be minted. 

[I| @param to The account to transfer the minted tokens to. 

/// @param amount The amount of tokens to mint. 

/// @dev For security reasons, operators are not allowed to mint. Only the actual owner 
can do this. Of course the owner can be a contract. 

function mint(uint256 tokenld, address to, uint256 amount) public onlyOwner(tokenld) { 


_mint(to, tokenld, amount); 


/// @notice Burns tokens. Only the holder of tokens can burn them or an approved 
operator. 
/// @param tokenld The token to be burned. 
/// @param amount The amount of tokens to burn. 
function burn(uint256 tokenld, address from, uint256 amount) public allowed(from, 
tokenld) { 
require(assets[tokenld].tokenType == TokenType.Native, "NTF: Not native"); 


_burn(from, tokenld, amount); 


/// @notice The “owner can mint tokens. If a fixed supply is needed, the “owner should 
mint the totalSupply and renounce ownership. 
/// @param tokenld The token to be minted. 
/// @param tos The accounts to transfer the minted tokens to. 
/// @param amounts The amounts of tokens to mint. 
/// @dev If the tos array is longer than the amounts array there will be an out of bounds 
error. If the amounts array is longer, the extra amounts are simply ignored. 
/// @dev For security reasons, operators are not allowed to mint. Only the actual owner 
can do this. Of course the owner can be a contract. 
function batchMint(uint256 tokenld, address[] calldata tos, uint256[] calldata amounts) 
public onlyOwner(tokenld) { 
uint256 len = tos.length; 
for (uint256 i = 0; i < len; i++) { 


_mint(tos[i], tokenld, amounts[i]); 


/// @notice Burns tokens. This is only useful to be used by an operator. 
/// @param tokenld The token to be burned. 
/// @param froms The accounts to burn tokens from. 
/// @param amounts The amounts of tokens to burn. 
function batchBurn(uint256 tokenld, address[] calldata froms, uint256[] calldata amounts) 
public { 
require(assets[tokenld].tokenType == TokenType.Native, "NTF: Not native"); 
uint256 len = froms.length; 
for (uint256 i = 0; i < len; i++) { 
_requireTransferAllowed(froms[i], 
isApprovedForAsset[froms[i]][msg.sender][tokenld]); 


_burn(froms[i], tokenld, amounts[i]); 


----- E:/Train/makePDF/v1\YieldBox-master\contracts/YieldBox.sol---- 


// SPDX-License-Identifier: UNLICENSED 


// The YieldBox 

// The original BentoBox is owned by the Sushi team to set strategies for each token. 
Abracadabra wanted different strategies, which led to 

// them launching their own DegenBox. The YieldBox solves this by allowing an unlimited 
number of strategies for each token in a fully 


// permissionless manner. The YieldBox has no owner and operates fully permissionless. 


// Other improvements: 
// Better system to make sure the token to share ratio doesn't reset. 


// Full support for rebasing tokens. 


// This contract stores funds, handles their transfers, approvals and strategies. 


// Copyright (c) 2021, 2022 BoringCrypto - All rights reserved 


// Twitter: @Boring_Crypto 


// Since the contract is permissionless, only one deployment per chain is needed. If it's not 
yet deployed 

// on a chain or if you want to make a derivative work, contact @BoringCrypto. The core of 
YieldBox is 


// copyrighted. Most of the contracts that it builds on are open source though. 


// BEWARE: Still under active development 


// Security review not done yet 


pragma solidity *0.8.9; 

pragma experimental ABIEncoderV2; 

import "./interfaces/IWrappedNative.sol"; 

import "./interfaces/IStrategy.sol"; 

import "@boringcrypto/boring-solidity/contracts/interfaces/IERC721.sol"; 
import "@boringcrypto/boring-solidity/contracts/interfaces/IERC1155.sol"; 
import "@boringcrypto/boring-solidity/contracts/libraries/Base64.sol"; 
import "@boringcrypto/boring-solidity/contracts/Domain.sol"; 

import "./ERC721TokenReceiver.sol"; 

import "./ERC1155TokenReceiver.sol"; 

import "./ERC1155.sol"; 

import "@boringcrypto/boring-solidity/contracts/BoringBatchable.sol"; 
import "@openzeppelin/contracts/utils/Strings.sol"; 

import "./AssetRegister.sol"; 

import "./NativeTokenFactory.sol"; 

import "./YieldBoxRebase.sol"; 

import "./YieldBoxURI|Builder.sol"; 


import "./YieldBoxPermit.sol"; 


// solhint-disable no-empty-blocks 


/// @title YieldBox 


/// @author BoringCrypto, Keno 


/// @notice The YieldBox is a vault for tokens. The stored tokens can assigned to strategies. 


/// Yield from this will go to the token depositors. 

/// Any funds transfered directly onto the YieldBox will be lost, use the deposit function 
instead. 

contract YieldBox is YieldBoxPermit, BoringBatchable, NativeTokenFactory, 
ERC721TokenReceiver, ERC1155TokenReceiver { 


// *** CONSTRUCTOR *** // 

using BoringAddress for address; 

using BoringERC20 for IERC20; 

using BoringERC20 for I|WrappedNative; 


using YieldBoxRebase for uint256; 


[| *** EVENTS *** // 

event Deposited( 
address indexed sender, 
address indexed from, 
address indexed to, 
uint256 assetld, 
uint256 amountin, 
uint256 shareln, 
uint256 amountOut, 
uint256 shareOut, 


bool isNFT 


event Withdraw( 
address indexed sender, 
address indexed from, 
address indexed to, 
uint256 assetld, 
uint256 amountin, 
uint256 shareln, 
uint256 amountOut, 


uint256 shareOut 


// *** CONSTRUCTOR *** // 


IWrappedNative public immutable wrappedNative; 


YieldBoxURIBuilder public immutable uriBuilder; 


constructor(IWrappedNative wrappedNative_, YieldBoxURIBuilder uriBuilder_) 
YieldBoxPermit("YieldBox") { 
wrappedNative = wrappedNative ; 


uriBuilder = uriBuilder_; 


// *** INTERNAL FUNCTIONS *** // 


/// @dev Returns the total balance of `token` the strategy contract holds, 
/// plus the total amount this contract thinks the strategy holds. 
function tokenBalanceOf(Asset storage asset) internal view returns (uint256 amount) { 


return asset.strategy.currentBalance(); 


// *** PUBLIC FUNCTIONS *** // 


/// @notice Deposit an amount of ‘token’ represented in either “amount® or ‘share’. 
/// @param assetld The id of the asset. 
/// @param from which account to pull the tokens. 
/// @param to which account to push the tokens. 
/// @param amount Token amount in native representation to deposit. 
/// @param share Token amount represented in shares to deposit. Takes precedence over 
“amount. 
/// @return amountOut The amount deposited. 
/// @return shareOut The deposited amount repesented in shares. 
function depositAsset( 
uint256 assetld, 
address from, 


address to, 


uint256 amount, 
uint256 share 
) public allowed(from, assetld) returns (uint256 amountOut, uint256 shareOut) { 
// Checks 
Asset storage asset = assets[assetld]; 
require(asset.tokenType != TokenType.Native && asset.tokenType != 


TokenType.ERC721, "YieldBox: can't deposit type"); 


// Effects 
uint256 totalAmount = _tokenBalanceOf(asset); 
if (share == 0) { 
// value of the share may be lower than the amount due to rounding, that's ok 
share = amount._toShares(totalSupply[assetld], totalAmount, false); 
} else { 
// amount may be lower than the value of share due to rounding, in that case, add 1 
to amount (Always round up) 


amount = share. toAmount(totalSupply[assetld], totalAmount, true); 


_mint(to, assetld, share); 


// Interactions 
if (asset.tokenType == TokenType.ERC20) { 
// For ERC20 tokens, use the safe helper function to deal with broken ERC20 
implementations. This actually calls transferFrom on the ERC20 contract. 


IERC20(asset.contractAddress).safeTransferFrom(from, address(asset.strategy), 


amount); 
} else { 
// ERC1155 
// When depositing yieldBox tokens into the yieldBox, things can be simplified 
if (asset.contractAddress == address(this)) { 
_transferSingle(from, address(asset.strategy), asset.tokenld, amount); 
} else { 
IERC1155(asset.contractAddress).safeTransferFrom(from, address(asset.strategy), 
asset.tokenld, amount, ""); 


} 


asset.strategy.deposited(amount); 


emit Deposited(msg.sender, from, to, assetld, amount, share, amountOut, shareOut, 


false); 


return (amount, share); 


/// @notice Deposit an NFT asset 

/// @param assetlid The id of the asset. 

/// @param from which account to pull the tokens. 
/// @param to which account to push the tokens. 
/// @return amountOut The amount deposited. 


/// @return shareOut The deposited amount repesented in shares. 


function depositNFTAsset( 
uint256 assetld, 
address from, 
address to 
) public allowed(from, assetld) returns (uint256 amountOut, uint256 shareOut) { 
// Checks 
Asset storage asset = assets[assetld]; 


require(asset.tokenType == TokenType.ERC721, "YieldBox: not ERC721"); 


// Effects 


_mint(to, assetid, 1); 


// Interactions 


IERC721(asset.contractAddress).safeTransferFrom(from, address(asset.strategy), 


asset.tokenld); 


asset.strategy.deposited(1); 


emit Deposited(msg.sender, from, to, assetid, 1, 1, 1, 1, true); 


return (1, 1); 


/// @notice Deposit ETH asset 


/// @param assetld The id of the asset. 


/// @param to which account to push the tokens. 


/// @param amount ETH amount to deposit. 
/// @return amountOut The amount deposited. 
/// @return shareOut The deposited amount repesented in shares. 
function depositETHAsset(uint256 assetld, address to, uint256 amount) public payable 
returns (uint256 amountOut, uint256 shareOut) { 
// Checks 
Asset storage asset = assets[assetld]; 
require(asset.tokenType == TokenType.ERC20 && asset.contractAddress == 


address(wrappedNative), "YieldBox: not wrappedNative"); 


// Effects 
uint256 share = amount. toShares(totalSupply[assetld], _tokenBalanceOf(asset), 


false); 


_mint(to, assetld, share); 


// Interactions 
wrappedNative.deposit{ value: amount }(); 
// Strategies always receive wrappedNative (Supporting both wrapped and raw native 
tokens adds too much complexity) 
wrappedNative.safeTransfer(address(asset.strategy), amount); 


asset.strategy.deposited(amount); 


emit Deposited(msg.sender, msg.sender, to, assetld, amount, share, amountOut, 


shareOut, false); 


return (amount, share); 


/// @notice Withdraws an amount of ‘token’ from a user account. 
/// @param assetld The id of the asset. 
/// @param from which user to pull the tokens. 
/// @param to which user to push the tokens. 
/// @param amount of tokens. Either one of “amount or ‘share’ needs to be supplied. 
/// @param share Like above, but “share” takes precedence over ‘amount’. 
function withdraw( 
uint256 assetld, 
address from, 
address to, 
uint256 amount, 
uint256 share 
) public allowed(from, assetld) returns (uint256 amountOut, uint256 shareOut) { 
// Checks 
Asset storage asset = assets[assetld]; 


require(asset.tokenType != TokenType.Native, "YieldBox: can't withdraw Native"); 


// Handle ERC721 separately 


if (asset.tokenType == TokenType.ERC721) { 


return _withdrawNFT(asset, assetld, from, to); 


return _withdrawFungible(asset, assetld, from, to, amount, share); 


/// @notice Handles burning and withdrawal of ERC20 and 1155 tokens. 
IIl @param asset The asset to withdraw. 
/// @param assetld The id of the asset. 
/// @param from which user to pull the tokens. 
/// @param to which user to push the tokens. 
function _withdrawNFT( 
Asset storage asset, 
uint256 assetld, 
address from, 
address to 
) internal returns (uint256 amountOut, uint256 shareOut) { 


_burn(from, assetid, 1); 


// Interactions 


asset.strategy.withdraw(to, 1); 


emit Withdraw(msg.sender, from, to, assetid, 1, 1, 1, 1); 


return (1, 1); 


/// @notice Handles burning and withdrawal of ERC20 and 1155 tokens. 


/// @param asset The asset to withdraw. 


/// @param assetld The id of the asset. 


/// @param from which user to pull the tokens. 
[I| @param to which user to push the tokens. 
/// @param amount of tokens. Either one of “amount or ‘share’ needs to be supplied. 
/// @param share Like above, but “share” takes precedence over ‘amount’. 
function withdrawFungible( 

Asset storage asset, 

uint256 assetld, 

address from, 

address to, 

uint256 amount, 

uint256 share 
) internal returns (uint256 amountOut, uint256 shareOut) { 

// Effects 

uint256 totalAmount = _tokenBalanceOf(asset); 

if (share == 0) { 

// value of the share paid could be lower than the amount paid due to rounding, in 
that case, add a share (Always round up) 
share = amount._toShares(totalSupply[assetld], total[Amount, true); 
} else { 
// amount may be lower than the value of share due to rounding, that's ok 


amount = share. toAmount(totalSupply[assetld], totalAmount, false); 


_burn(from, assetid, share); 


// Interactions 


asset.strategy.withdraw(to, amount); 


emit Withdraw(msg.sender, from, to, assetld, amount, share, amountOut, shareOut); 


return (amount, share); 


/// @notice Transfer shares from a user account to another one. 
/// @param from which user to pull the tokens. 
/// @param to which user to push the tokens. 
/// @param assetld The id of the asset. 
/// @param share The amount of `token` in shares. 
function transfer(address from, address to, uint256 assetld, uint256 share) public 
allowed(from, assetld) { 


_transferSingle(from, to, assetld, share); 


function batchTransfer(address from, address to, uint256[] calldata assetlds_, uint256[] 
calldata shares_) public { 
uint256 len = assetids_.length; 
for (uint256 i = 0; i < len; i++) { 


_requireTransferAllowed(from, isApprovedForAsset[from][msg.sender][assetids [i]]); 


_transferBatch(from, to, assetlds_, shares_); 


function _transferBatch(address from, address to, uint256[] calldata ids, uint256[] 
calldata values) internal override { 


require(to != address(0), "No 0 address"); 


uint256 len = ids.length; 
for (uint256 i = 0; i < len; i++) { 
uint256 id = ids[i]; 
_requireTransferAllowed(from, isApprovedForAsset[from][msg.sender][id]); 
uint256 value = values[i]; 
balanceOf[from][id] -= value; 


balanceOf[to][id] += value; 


emit TransferBatch(msg.sender, from, to, ids, values); 


/// @notice Transfer shares from a user account to multiple other ones. 

/// @param assetlid The id of the asset. 

/// @param from which user to pull the tokens. 

/// @param tos The receivers of the tokens. 

/// @param shares The amount of “token” in shares for each receiver in ‘tos’. 

function transferMultiple(address from, address[] calldata tos, uint256 assetld, uint256[] 
calldata shares) public allowed(from, assetld) { 

// Checks 


uint256 len = tos.length; 


for (uint256 i = 0; i < len; i++) { 
require(tos[i] != address(0), "YieldBox: to not set"); // To avoid a bad UI from burning 


funds 


// Effects 
uint256 _totalShares; 
for (uint256 i = 0; i < len; i++) { 
address to = tos[i]; 
uint256 share_ = shares[i]; 
balanceOf[to][assetld] += share_; 
_totalShares += share_; 
emit TransferSingle(msg.sender, from, to, assetld, share_); 


} 


balanceOf[from][assetld] -= totalShares; 


/// @notice Update approval status for an operator 
/// @param operator The address approved to perform actions on your behalf 
/// @param approved True/False 
function setApprovalForAll(address operator, bool approved) external override { 
// Checks 
require(operator != address(0), "YieldBox: operator not set"); // Important for security 


require(operator != address(this), "YieldBox: can't approve yieldBox"); 


// Effects 


_setApprovalForAll(msg.sender, operator, approved); 


/// @notice Update approval status for an operator 
/// @param _owner The YieldBox account owner 
/// @param operator The address approved to perform actions on your behalf 
/// @param approved True/False 
function _setApprovalForAll(address _owner, address operator, bool approved) internal 
override { 
isApprovedForAll[_owner][operator] = approved; 


emit ApprovalForAll(_owner, operator, approved); 


/// @notice Update approval status for an operator and for a specific asset 
/// @param operator The address approved to perform actions on your behalf 
/// @param assetlid The asset id to update approval status for 
[I| @param approved True/False 
function setApprovalForAsset(address operator, uint256 assetld, bool approved) external 
override { 
// Checks 
require(operator != address(0), "YieldBox: operator not set"); // Important for security 


require(operator != address(this), "YieldBox: can't approve yieldBox"); 


// Effects 


_setApprovalForAsset(msg.sender, operator, assetid, approved); 


/// @notice Update approval status for an operator and for a specific asset 

/// @param _owner The owner of the asset 

/// @param operator The address approved to perform actions on your behalf 

/// @param assetld The asset id to update approval status for 

[I| @param approved True/False 

function _setApprovalForAsset(address _owner, address operator, uint256 assetld, bool 
approved) internal override { 

require(assetild < assetCount(), "YieldBox: asset not valid"); 
isApprovedForAsset[_owner][operator][assetld] = approved; 


emit ApprovalForAsset(_owner, operator, assetld, approved); 


// This functionality has been split off into a separate contract. This is only a view function, 
SO gas usage isn't a huge issue. 
// This keeps the YieldBox contract smaller, so it can be optimized more. 
function uri(uint256 assetid) external view override returns (string memory) { 
return uriBuilder.uri(assets[assetld], nativeTokens[assetld], totalSupply[assetld], 
owner[assetld]); 


} 


function name(uint256 assetid) external view returns (string memory) { 


return uriBuilder.name(assets[assetld], nativeTokens[assetid].name); 


function symbol(uint256 assetid) external view returns (string memory) { 


return uriBuilder.symbol(assets[assetid], nativeTokens[assetld].symbol); 


function decimals(uint256 assetid) external view returns (uint8) { 


return uriBuilder.decimals(assets[assetid], nativeTokens[assetld].decimals); 


// Helper functions 


/// @notice Helper function to return totals for an asset 
/// @param assetld The regierestered asset id 
/// @return totalShare The total amount for asset represented in shares 
/// @return totalAmount The total amount for asset 
function assetTotals(uint256 assetid) external view returns (uint256 totalShare, uint256 
totalAmount) { 
totalShare = totalSupply[assetld]; 


totalAmount = _tokenBalanceOf(assets[assetld]); 


/// @dev Helper function to represent an ‘amount’ of `token` in shares. 
/// @param assetld The id of the asset. 
/// @param amount The `token`ò amount. 
/// @param roundup If the result `shareò should be rounded up. 
/// @return share The token amount represented in shares. 
function toShare(uint256 assetid, uint256 amount, bool roundUp) external view returns 


(uint256 share) { 


if (assets[assetld].tokenType == TokenType.Native || assets[assetld].tokenType == 
TokenType.ERC721) { 
share = amount; 
} else { 
share = amount. toShares(totalSupply[assetld], _tokenBalanceOf(assets[assetld]), 
roundUp); 
} 


/// @dev Helper function represent shares back into the `token`ò amount. 
/// @param assetld The id of the asset. 
/// @param share The amount of shares. 
/// @param roundup If the result should be rounded up. 
/// @return amount The share amount back into native representation. 
function toAmount(uint256 assetid, uint256 share, bool roundUp) external view returns 
(uint256 amount) { 
if (assets[assetld].tokenType == TokenType.Native || assets[assetld].tokenType == 
TokenType.ERC721) { 
amount = share; 
} else { 
amount = share. toAmount(totalSupply[assetld], _tokenBalanceOf(assets[assetld]), 
roundUp); 
} 


/// @dev Helper function represent the balance in `tokenò amount for a “user for an 


“asset. 
/// @param user The “user to get the amount for. 
/// @param assetld The id of the asset. 


function amountOf(address user, uint256 assetid) external view returns (uint256 amount) 


if (assets[assetld].tokenType == TokenType.Native || assets[assetld].tokenType == 
TokenType.ERC721) { 
amount = balanceOf[user][assetld]; 
} else { 
amount = _ balanceOf[user][assetld]. toAmount(totalSupply[assetld], 
_tokenBalanceOf(assets[assetld]), false); 


} 


/// @notice Helper function to register & deposit an asset 
/// @param tokenType Registration token type. 

/// @param contractAddress Token address. 

/// @param strategy Asset's strategy address. 

/// @param tokenld Registration token id. 

/// @param from which user to pull the tokens. 

/// @param to which account to push the tokens. 

/// @param amount amount to deposit. 

[I| @param share amount to deposit represented in shares. 
/// @return amountOut The amount deposited. 

/// @return shareOut The deposited amount repesented in shares. 


function deposit( 


TokenType tokenType, 
address contractAddress, 
IStrategy strategy, 
uint256 tokenld, 
address from, 
address to, 
uint256 amount, 
uint256 share 
) public returns (uint256 amountOut, uint256 shareOut) { 
if (tokenType == TokenType.Native) { 
// If native token, register it as an ERC1155 asset (as that's what it is) 
return depositAsset(registerAsset(TokenType.ERC1155, address(this), strategy, 
tokenld), from, to, amount, share); 
} else { 
return depositAsset(registerAsset(tokenType, contractAddress, strategy, tokenld), 
from, to, amount, share); 


} 


/// @notice Helper function to register & deposit ETH 
/// @param strategy Asset's strategy address. 
/// @param amount amount to deposit. 
/// @return amountOut The amount deposited. 
/// @return shareOut The deposited amount repesented in shares. 
function depositETH(IStrategy strategy, address to, uint256 amount) public payable 


returns (uint256 amountOut, uint256 shareOut) { 


return depositETHAsset(registerAsset(TokenType.ERC20, address(wrappedNative), 
strategy, 0), to, amount); 


} 


----- E:/Train/makePDF/v1\YieldBox-master\contracts/YieldBoxPermit.sol---- 


// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.0; 


import "@openzeppelin/contracts/utils/cryptography/EIP712.sol"; 
import "@openzeppelin/contracts/utils/cryptography/ECDSA.sol"; 
import "@openzeppelin/contracts/utils/Counters.sol"; 


import "./interfaces/lYieldBox.sol"; 


[** 

* Modification of the OpenZeppelin ERC20Permit contract to support ERC721 tokens. 

s OpenZeppelin Contracts (last updated v4.8.0) 

(token/ERC20/extensions/draft-ERC20Permit.sol). 

* 

* @dev Implementation of the ERC-4494 Permit extension allowing approvals to be made 
via signatures, as defined in 

* https://eips.ethereum.org/EIPS/eip-4494[EIP-4494]. 

* 

* Adds the {permit} method, which can be used to change an account's ERC721 allowance 
(see {IERC721-allowance}) by 

* presenting a message signed by the account. By not relying on ‘{IERC721-approve} >, the 
token holder account doesn't 

* need to send a transaction, and thus is not required to hold Ether at all. 

*/ 


abstract contract YieldBoxPermit is EIP712 { 


using Counters for Counters.Counter; 


mapping(address => Counters.Counter) private _nonces; 


bytes32 private constant PERMIT _TYPEHASH = 
keccak256("Permit(address owner,address spender,uint256 assetid,uint256 


nonce,uint256 deadline)"); 


bytes32 private constant PERMIT _ALL_TYPEHASH = 
keccak256("PermitAll(address owner,address spender,uint256 nonce,uint256 


deadline)"); 


[** 
* @dev Initializes the {EIP712} domain separator using the “name parameter, and 
setting “version: to ~"1">. 
* 
* It's a good idea to use the same ‘name that is defined as the ERC721 token name. 
*/ 


constructor(string memory name) EIP712(name, "1") {} 


function permit( 
address owner, 


address spender, 


uint256 assetld, 
uint256 deadline, 
uint8 v, 
bytes32 r, 
bytes32 s 

) public virtual { 


require(block.timestamp <= deadline, "YieldBoxPermit: expired deadline"); 


bytes32 structHash = keccak256(abi.encode(_PERMIT_TYPEHASH, owner, spender, 


assetid, useNonce(owner), deadline)); 


bytes32 hash = _hashTypedDataV4(structHash); 


address signer = ECDSA.recover(hash, v, r, S); 


require(signer == owner, "YieldBoxPermit: invalid signature"); 


_setApprovalForAsset(owner, spender, assetld, true); 


function setApprovalForAsset( 
address owner, 
address spender, 
uint256 assetld, 
bool approved 


) internal virtual; 


function permitAll( 
address owner, 
address spender, 
uint256 deadline, 
uint8 v, 
bytes32 r, 
bytes32 s 

) public virtual { 


require(block.timestamp <= deadline, "YieldBoxPermit: expired deadline"); 


bytes32 structHash = keccak256(abi.encode(_PERMIT_ALL_TYPEHASH, owner, spender, 


_useNonce(owner), deadline)); 


bytes32 hash = _hashTypedDataV4(structHash); 


address signer = ECDSA.recover(hash, v, r, S); 


require(signer == owner, "YieldBoxPermit: invalid signature"); 


_setApprovalForAll(owner, spender, true); 


function _setApprovalForAll( 


address owner, 


address operator, 


bool approved 


) internal virtual; 


[** 

* @dev See {IERC20Permit-nonces}. 

g 

function nonces(address owner) public view virtual returns (uint256) { 


return _nonces[owner].current(); 


[** 

* @dev See {IERC20Permit-DOMAIN_ SEPARATOR}. 

*/ 

// solhint-disable-next-line func-name-mixedcase 

function DOMAIN_SEPARATOR() external view returns (bytes32) { 


return _domainSeparatorV4(); 


[** 

* @dev "Consume a nonce": return the current value and increment. 

* 

*/ 

function _useNonce(address owner) internal virtual returns (uint256 current) { 
Counters.Counter storage nonce = _nonces[owner]; 
current = nonce.current(); 


nonce.increment(); 


----- E:/Train/makePDF/v1\YieldBox-master\contracts/YieldBoxRebase.sol---- 


// SPDX-License-Identifier: MIT 


pragma solidity *0.8.9; 

pragma experimental ABIEncodervV2; 

import "./interfaces/IStrategy.sol"; 

import "@boringcrypto/boring-solidity/contracts/interfaces/IERC1155.sol"; 
import "@boringcrypto/boring-solidity/contracts/libraries/Base64.sol"; 
import "@boringcrypto/boring-solidity/contracts/libraries/BoringAddress.sol"; 
import "@boringcrypto/boring-solidity/contracts/libraries/BoringERC20.sol"; 
import "@boringcrypto/boring-solidity/contracts/Domain.sol"; 

import "./ERC1155TokenReceiver.sol"; 

import "./ERC1155.sol"; 

import "@boringcrypto/boring-solidity/contracts/BoringBatchable.sol"; 


import "@boringcrypto/boring-solidity/contracts/BoringFactory.sol"; 


library YieldBoxRebase { 
/// @notice Calculates the base value in relationship to ‘elastic’ and ‘total’. 
function toShares( 
uint256 amount, 
uint256 totalShares _, 
uint256 totalAmount, 
bool roundUp 
) internal pure returns (uint256 share) { 
// To prevent reseting the ratio due to withdrawal of all shares, we start with 


// 1 amount/1e8 shares already burned. This also starts with a 1 : 1e8 ratio which 


// functions like 8 decimal fixed point math. This prevents ratio attacks or inaccuracy 
// due to ‘gifting' or rebasing tokens. (Up to a certain degree) 
totalAmount++; 


totalShares_ += 1e8; 


// Calculte the shares using te current amount to share ratio 


share = (amount * totalShares_) / totalAmount; 


// Default is to round down (Solidity), round up if required 
if (roundUp && (share * totalAmount) / totalShares_ < amount) { 


share++; 


/// @notice Calculates the elastic value in relationship to `base` and ‘total’. 
function toAmount( 
uint256 share, 
uint256 totalShares _, 
uint256 totalAmount, 
bool roundUp 
) internal pure returns (uint256 amount) { 
// To prevent reseting the ratio due to withdrawal of all shares, we start with 
// 1 amount/1e8 shares already burned. This also starts with a 1 : 1e8 ratio which 
// functions like 8 decimal fixed point math. This prevents ratio attacks or inaccuracy 
// due to ‘gifting' or rebasing tokens. (Up to a certain degree) 


totalAmount++; 


totalShares_ += 1e8; 


// Calculte the amount using te current amount to share ratio 


amount = (share * totalAmount) / totalShares ; 


// Default is to round down (Solidity), round up if required 
if (roundUp && (amount * totalShares_) / totalAmount < share) { 


amount++; 


----- E:/Train/makePDF/v1\YieldBox-master\contracts/YieldBoxURIBuilder.sol---- 
// SPDX-License-Identifier: MIT 

pragma solidity *0.8.9; 

import "@openzeppelin/contracts/utils/Strings.sol"; 

import "@boringcrypto/boring-solidity/contracts/libraries/Base64.sol"; 

import "@boringcrypto/boring-solidity/contracts/libraries/BoringERC20.sol"; 
import "./interfaces/lYieldBox.sol"; 


import "./NativeTokenFactory.sol"; 


// solhint-disable quotes 


contract YieldBoxURIBuilder { 
using BoringERC20 for IERC20; 
using Strings for uint256; 


using Base64 for bytes; 


struct AssetDetails { 
string tokenType; 
string name; 
string symbol; 


uint256 decimals; 


function name(Asset calldata asset, string calldata nativeName) external view returns 
(string memory) { 


if (asset.strategy == NO_STRATEGY) { 


return nativeName; 
} else { 
if (asset.tokenType == TokenType.ERC20) { 
IERC20 token = IERC20(asset.contractAddress); 
return string(abi.encodePacked(token.safeName(), " (", asset.strategy.name(), 
")")); 
} else if (asset.tokenType == TokenType.ERC1155) { 
return 
string( 
abi.encodePacked( 
string( 
abi.encodePacked( 
"ERC1155:", 
uint256(uint160(asset.contractAddress)).toHexString(20), 
a 


asset.tokenld.toString() 


n Ce 
asset.strategy.name(), 


")" 


); 
} else { 


return string(abi.encodePacked(nativeName, " (", asset.strategy.name(), ")")); 


function symbol(Asset calldata asset, string calldata nativeSymbol) external view returns 
(string memory) { 
if (asset.strategy == NO_STRATEGY) { 
return nativeSymbol; 
} else { 
if (asset.tokenType == TokenType.ERC20) { 
IERC20 token = IERC20(asset.contractAddress); 
return string(abi.encodePacked(token.safeSymbol(), " (", asset.strategy.name(), 
")")); 
} else if (asset.tokenType == TokenType.ERC1155) { 
return string(abi.encodePacked("ERC1155", " (", asset.strategy.name(), ")")); 
} else { 


return string(abi.encodePacked(nativeSymbol, " (", asset.strategy.name(), ")")); 


function decimals(Asset calldata asset, uint8 nativeDecimals) external view returns 
(uint8) { 
if (asset.tokenType == TokenType.ERC1155) { 
return 0; 
} else if (asset.tokenType == TokenType.ERC20) { 


IERC20 token = IERC20(asset.contractAddress); 


return token.safeDecimals(); 
} else { 


return nativeDecimals; 


function uri( 
Asset calldata asset, 
NativeToken calldata nativeToken, 
uint256 totalSupply, 
address owner 
) external view returns (string memory) { 
AssetDetails memory details; 
if (asset.tokenType == TokenType.ERC1155) { 
// Contracts can't retrieve URIs, so the details are out of reach 
details.tokenType = "ERC1155"; 
details.name = string( 
abi.encodePacked("ERC1155:", 
uint256(uintl160(asset.contractAddress)).toHexString(20), "/", asset.tokenld.toString()) 
); 
details.symbol = "ERC1155"; 
} else if (asset.tokenType == TokenType.ERC20) { 
IERC20 token = IERC20(asset.contractAddress); 
details = AssetDetails("ERC20", token.safeName(), token.safeSymbol(), 
token.safeDecimals()); 


} else { 


// Native 

details.tokenType = "Native"; 
details.name = nativeToken.name; 
details.symbol = nativeToken.symbol; 


details.decimals = nativeToken.decimals; 


string memory properties = string( 
asset.tokenType != TokenType.Native 
?  abi.encodePacked(',"tokenAddress":"', 
uint256(uintl60(asset.contractAddress)).toHexString(20), '"') 
: abi.encodePacked(',"totalSupply":', totalSupply.toString(), ',"fixedSupply":', 
owner == address(0) ? "true" : "false") 


hi 


return 
string( 
abi.encodePacked( 
"data:application/json;base64,", 
abi 
.encodePacked( 
'{"name":'", 
details.name, 
™ "symbol":"', 


details.symbol, 


asset.tokenType == TokenType.ERC1155 ? "" : ',"decimals":', 


asset.tokenType == TokenType.ERC1155 ? "" : details.decimals.toString(), 


',"properties":{"strategy":", 


uint256(uintl160(address(asset.strategy))).toHexString(20), 


™ "tokenType":"', 
details.tokenType, 
properties, 
asset.tokenType == 
string(abi.encodePacked(',"tokenld":', asset.tokenld.toString())) : "", 


"hp" 


.encode() 


TokenType.ERC1155 ? 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\enums/YieldBoxTokenType.sol---- 
// SPDX-License-Identifier: MIT 


pragma solidity *0.8.9; 


/// @title TokenType 
/// @author BoringCrypto (@Boring_Crypto) 
/// @notice The YieldBox can hold different types of tokens: 
/// Native: These are ERC1155 tokens native to YieldBox. Protocols using YieldBox should use 
these is possible when simple token creation is needed. 
/// ERC20: ERC20 tokens (including rebasing tokens) can be added to the YieldBox. 
/// ERC1155: ERC1155 tokens are also supported. This can also be used to add YieldBox 
Native tokens to strategies since they are ERC1155 tokens. 
enum TokenType { 
Native, 
ERC20, 
ERC721, 
ERC1155, 


None 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\interfaces/IStrategy.sol---- 
// SPDX-License-Identifier: MIT 
pragma solidity *0.8.9; 


pragma experimental ABIEncoderV2; 


import "../enums/YieldBoxTokenType.sol"; 


import "./lYieldBox.sol"; 


interface IStrategy { 

/// Each strategy only works with a single asset. This should help make implementations 
simpler and more readable. 

/// To safe gas a proxy pattern (YieldBox factory) could be used to deploy the same 


strategy for multiple tokens. 


/// It is recommended that strategies keep a small amount of funds uninvested (like 5%) 
to handle small withdrawals 


/// and deposits without triggering costly investing/divesting logic. 


Il HEHEHE HEEHEHEAEEHEEHHEEAE EE 


III ### Basic Information ### 


ll HEHEHE EHEEHEHEAEEAHEEHHEEAEEE 


/// Returns the address of the yieldBox that this strategy is for 


function yieldBox() external view returns (lYieldBox yieldBox_); 


/// Returns a name for this strategy 


function name() external view returns (string memory name); 


/// Returns a description for this strategy 


function description() external view returns (string memory description_); 


II HHHHFHFHFHFHHHEHEAHEAEAHAHHE 
IIl ### Supported Token ### 


ll HHEHHFHEHHEHEEAEEHEEHEEHE 


/// Returns the standard that this strategy works with 


function tokenType() external view returns (TokenType tokenType ); 


/// Returns the contract address that this strategy works with 


function contractAddress() external view returns (address contractAddress ); 


/// Returns the tokenld that this strategy works with (for EIP1155) 
/// This is always O for EIP20 tokens 


function tokenld() external view returns (uint256 tokenld_); 


HL HHEAFHHEHEHEHEHEHEHHEEFHAAAHA AAR 
IIl ### Balance Information ### 


ll FHEHHEFHEEHEHEEEEHEEHEHEAEEEEFE 


/// Returns the total value the strategy holds (principle + gain) expressed in asset token 
amount. 


/// This should be cheap in gas to retrieve. Can return a bit less than the actual, but MUST 


NOT return more. 

/// The gas cost of this function will be paid on any deposit or withdrawal onto and out of 
the YieldBox 

/// that uses this strategy. Also, anytime a protocol converts between shares and amount, 
this gets called. 


function currentBalance() external view returns (uint256 amount); 


/// Returns the maximum amount that can be withdrawn 


function withdrawable() external view returns (uint256 amount); 


/// Returns the maximum amount that can be withdrawn for a low gas fee 
/// When more than this amount is withdrawn it will trigger divesting from the actual 
strategy 
/// which will incur higher gas costs 


function cheapWithdrawable() external view returns (uint256 amount); 


II HHHHAEFAHEHEAAHAHHFAHHRAHAHRHAHHHESA 
IIl ### YieldBox Functions ### 


ll HEHEHE HEEHEHEEEEHEEHEEAE HEHE 


/// \s called by YieldBox to signal funds have been added, the strategy may choose to act 
on this 
/// When a large enough deposit is made, this should trigger the strategy to invest into the 
actual 
/// strategy. This function should normally NOT be used to invest on each call as that 


would be costly 


/// for small deposits. 

/// \f the strategy handles native tokens (ETH) it will receive it directly (not wrapped). It 
will be 

/// up to the strategy to wrap it if needed. 

/// Only accept this call from the YieldBox 


function deposited(uint256 amount) external; 


/// \s called by the YieldBox to ask the strategy to withdraw to the user 
/// When a strategy keeps a little reserve for cheap withdrawals and the requested 

withdrawal goes over this amount, 

/// the strategy should divest enough from the strategy to complete the withdrawal and 
rebalance the reserve. 

/// \f the strategy handles native tokens (ETH) it should send this, not a wrapped version. 

/// With some strategies it might be hard to withdraw exactly the correct amount. 

/// Only accept this call from the YieldBox 


function withdraw(address to, uint256 amount) external; 


IStrategy constant NO_STRATEGY = IStrategy(address(0)); 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\interfaces/IWrappedNative.sol---- 
// SPDX-License-Identifier: MIT 
pragma solidity *0.8.9; 


import "@boringcrypto/boring-solidity/contracts/interfaces/IERC20.sol"; 


interface IWrappedNative is IERC20 { 


function deposit() external payable; 


function withdraw(uint256) external; 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\interfaces/lYieldBox.sol---- 
// SPDX-License-Identifier: MIT 
pragma solidity *0.8.9; 


pragma experimental ABIEncoderV2; 


import "../enums/YieldBoxTokenType.sol"; 


interface lYieldBox { 


function wrappedNative() external view returns (address wrappedNative); 


function assets(uint256 assetld) 
external 
view 
returns ( 
TokenType tokenType, 
address contractAddress, 
address strategy, 


uint256 tokenld 


function nativeTokens(uint256 assetid) 
external 
view 
returns ( 
string memory name, 


string memory symbol, 


uint8 decimals 


function owner(uint256 assetid) external view returns (address owner); 


function totalSupply(uint256 assetid) external view returns (uint256 totalSupply); 


function setApprovalForAsset( 
address operator, 
uint256 assetld, 
bool approved 


) external; 


function depositAsset( 
uint256 assetld, 
address from, 
address to, 
uint256 amount, 
uint256 share 


) external returns (uint256 amountOut, uint256 shareOut); 


function withdraw( 
uint256 assetld, 
address from, 
address to, 


uint256 amount, 


uint256 share 


) external returns (uint256 amountOut, uint256 shareOut); 


function transfer( 
address from, 
address to, 
uint256 assetld, 
uint256 share 


) external; 


function batchTransfer( 
address from, 
address to, 
uint256[] calldata assetlids , 
uint256[] calldata shares _ 


) external; 


function transferMultiple( 
address from, 
address[] calldata tos, 
uint256 assetld, 
uint256[] calldata shares 


) external; 


function toShare( 


uint256 assetid, 


uint256 amount, 
bool roundUp 


) external view returns (uint256 share); 


function toAmount( 
uint256 assetld, 
uint256 share, 
bool roundUp 


) external view returns (uint256 amount); 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\mocks/ERC1155Mock.sol---- 
// SPDX-License-Identifier: MIT 
pragma solidity *0.8.9; 


import "../ERC1155.sol"; 


contract ERC1155Mock is ERC1155 { 
function mint( 
address to, 
uint256 id, 
uint256 amount 
) public { 


_mint(to, id, amount); 


function burn( 
address from, 
uint256 id, 
uint256 amount 
) public { 


_burn(from, id, amount); 


function transferSingle( 
address from, 
address to, 


uint256 id, 


uint256 value 
) public { 


_transferSingle(from, to, id, value); 


function transferBatch( 
address from, 
address to, 
uint256[] calldata ids, 
uint256[] calldata values 
) public { 


_transferBatch(from, to, ids, values); 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\mocks/ERC1155ReceiverMock.sol---- 
// SPDX-License-Identifier: MIT 
pragma solidity *0.8.9; 


import "../ERC1155.sol"; 


contract ERC1155ReceiverMock is IERC1155TokenReceiver { 
address public sender; 
address public operator; 
address public from; 
uint256 public id; 
uint256[] public ids; 
uint256 public value; 
uint256[] public values; 


bytes public data; 


uint256 public fromBalance; 


function onERC1155Received( 
address operator, 
address from, 
uint256 _id, 
uint256 value, 
bytes calldata_ data 

) external override returns (bytes4) { 
sender = msg.sender; 


operator = operator; 


bytes4(keccak256("onERC1155Received(address,address,uint256,uint256,bytes)")); 


} 


from = _from; 


value = value; 


data = data; 


fromBalance = ERC1155(sender).balanceOf(from, id); 


function onERC1155BatchReceived( 


address operator, 
address from, 

uint256[] calldata _ids, 
uint256[] calldata values, 


bytes calldata_ data 


) external override returns (bytes4) { 


sender = msg.sender; 
operator = _operator; 
from = _from; 

ids = _ids; 

values = _values; 
data = data; 


if (ids.length > 0) { 


fromBalance = ERC1155(sender).balanceOf(from, 


ids[0]); 


return 


return 


bytes4(keccak256("onERC1155BatchReceived(address,address,uint256[],uint256[],bytes)")) 


function returnToken() external { 


ERC1155(sender).safeTransferFrom(address(this), from, id, value, ""); 


function returnTokens() external { 


ERC1155(sender).safeBatchTransferFrom(address(this), from, ids, values, ""); 


contract ERC1155BrokenReceiverMock is IERC1155TokenReceiver { 
function onERC1155Received( 
address, 
address, 
uint256, 
uint256, 
bytes calldata 
) external pure override returns (bytes4) { 


return bytes4(keccak256("wrong")); 


function onERC1155BatchReceived( 
address, 
address, 
uint256[] calldata, 
uint256[] calldata, 
bytes calldata 
) external pure override returns (bytes4) { 


return bytes4(keccak256("wrong")); 


contract ERC1155RevertingReceiverMock is IERC1155TokenReceiver { 
function onERC1155Received( 
address, 
address, 
uint256, 
uint256, 
bytes calldata 
) external pure override returns (bytes4) { 


revert("Oops"); 


function onERC1155BatchReceived( 
address, 
address, 


uint256[] calldata, 


uint256[] calldata, 
bytes calldata 
) external pure override returns (bytes4) { 


revert("Oops"); 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\mocks/ERC1155StrategyMock.sol---- 
// SPDX-License-Identifier: MIT 
pragma solidity *0.8.9; 


pragma experimental ABIEncoderV2; 


import "@boringcrypto/boring-solidity/contracts/interfaces/IERC1155.sol"; 
import "../enums/YieldBoxTokenType.sol"; 
import "../interfaces/IStrategy.sol"; 


import "../ERC1155TokenReceiver.sol"; 


// solhint-disable const-name-snakecase 


// solhint-disable no-empty-blocks 


contract ERC1155StrategyMock is IStrategy, ERC1155TokenReceiver { 
string public constant override name = "ERC1155StrategyMock"; 


string public constant override description = "Mock Strategy for testing"; 


TokenType public constant override tokenType = TokenType.ERC1155; 
address public immutable override contractAddress; 


uint256 public immutable override tokenld; 


lYieldBox public immutable yieldBox; 


constructor( 


lYieldBox yieldBox_, 


address token, 


uint256 tokenld_ 

){ 
yieldBox = yieldBox_; 
contractAddress = token; 


tokenld = tokenld_; 


/// Returns the total value the strategy holds (principle + gain) expressed in asset token 

amount. 
/// This should be cheap in gas to retrieve. Can return a bit less than the actual, but 

shouldn't return more. 

/// The gas cost of this function will be paid on any deposit or withdrawal onto and out of 
the YieldBox 

/// that uses this strategy. Also, anytime a protocol converts between shares and amount, 
this gets called. 

function currentBalance() public view override returns (uint256 amount) { 


return IERC1155(contractAddress).balanceOf(address(this), tokenld); 


/// Returns the maximum amount that can be withdrawn 
function withdrawable() external view override returns (uint256 amount) { 


return IERC1155(contractAddress).balanceOf(address(this), tokenld); 


/// Returns the maximum amount that can be withdrawn for a low gas fee 


/// When more than this amount is withdrawn it will trigger divesting from the actual 


strategy 
/// which will incur higher gas costs 
function cheapWithdrawable() external view override returns (uint256 amount) { 


return IERC1155(contractAddress).balanceOf(address(this), tokenld); 


/// \s called by YieldBox to signal funds have been added, the strategy may choose to act 
on this 

/// When a large enough deposit is made, this should trigger the strategy to invest into the 
actual 

/// strategy. This function should normally NOT be used to invest on each call as that 

would be costly 

/// for small deposits. 

/// Only accept this call from the YieldBox 


function deposited(uint256 amount) external override {} 


/// \s called by the YieldBox to ask the strategy to withdraw to the user 
/// When a strategy keeps a little reserve for cheap withdrawals and the requested 
withdrawal goes over this amount, 
/// the strategy should divest enough from the strategy to complete the withdrawal and 
rebalance the reserve. 
/// Only accept this call from the YieldBox 
function withdraw(address to, uint256 amount) external override { 


IERC1155(contractAddress).safeTransferFrom(address(this), to, tokenld, amount, ""); 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\mocks/ERC20Mock.sol---- 
// SPDX-License-Identifier: MIT 
pragma solidity *0.8.9; 


import "@boringcrypto/boring-solidity/contracts/ERC20.sol"; 


contract ERC20Mock is ERC20 { 


uint256 public override totalSupply; 


constructor(uint256 _initialAmount) { 
// Give the creator all initial tokens 
balanceOf[msg.sender] = _initialAmount; 
// Update total supply 


totalSupply = _initialAmount; 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\mocks/ERC20StrategyMock.sol---- 
// SPDX-License-Identifier: MIT 
pragma solidity *0.8.9; 


pragma experimental ABIEncoderV2; 


import "@boringcrypto/boring-solidity/contracts/interfaces/IERC20.sol"; 
import "@boringcrypto/boring-solidity/contracts/libraries/BoringERC20.sol"; 
import "../enums/YieldBoxTokenType.sol"; 

import "../interfaces/IStrategy.sol"; 


import "../interfaces/lYieldBox.sol"; 


// solhint-disable const-name-snakecase 


// solhint-disable no-empty-blocks 


contract ERC20StrategyMock is IStrategy { 


using BoringERC20 for IERC20; 


string public constant override name = "ERC20StrategyMock"; 


string public constant override description = "Mock Strategy for testing"; 


TokenType public constant override tokenType = TokenType.ERC20; 


address public immutable override contractAddress; 


uint256 public constant override tokenld = 0; 


lYieldBox public immutable override yieldBox; 


constructor(lYieldBox yieldBox_, address token) { 
yieldBox = yieldBox_; 


contractAddress = token; 


/// Returns the total value the strategy holds (principle + gain) expressed in asset token 

amount. 
/// This should be cheap in gas to retrieve. Can return a bit less than the actual, but 

shouldn't return more. 

/// The gas cost of this function will be paid on any deposit or withdrawal onto and out of 
the YieldBox 

/// that uses this strategy. Also, anytime a protocol converts between shares and amount, 
this gets called. 

function currentBalance() public view override returns (uint256 amount) { 


return IERC20(contractAddress).balanceOf(address(this)); 


/// Returns the maximum amount that can be withdrawn 
function withdrawable() external view override returns (uint256 amount) { 


return IERC20(contractAddress).balanceOf(address(this)); 


/// Returns the maximum amount that can be withdrawn for a low gas fee 
/// When more than this amount is withdrawn it will trigger divesting from the actual 
strategy 


/// which will incur higher gas costs 


function cheapWithdrawable() external view override returns (uint256 amount) { 


return IERC20(contractAddress).balanceOf(address(this)); 


/// \s called by YieldBox to signal funds have been added, the strategy may choose to act 
on this 

/// When a large enough deposit is made, this should trigger the strategy to invest into the 
actual 

/// strategy. This function should normally NOT be used to invest on each call as that 

would be costly 

/// for small deposits. 

/// Only accept this call from the YieldBox 


function deposited(uint256 amount) external override {} 


/// \s called by the YieldBox to ask the strategy to withdraw to the user 
/// When a strategy keeps a little reserve for cheap withdrawals and the requested 
withdrawal goes over this amount, 
/// the strategy should divest enough from the strategy to complete the withdrawal and 
rebalance the reserve. 
/// Only accept this call from the YieldBox 
function withdraw(address to, uint256 amount) external override { 
if (contractAddress == yieldBox.wrappedNative()) {} else { 


IERC20(contractAddress).safeTransfer(to, amount); 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\mocks/ERC721Mock.sol---- 
// SPDX-License-Identifier: MIT 
pragma solidity *0.8.9; 


import "@openzeppelin/contracts/token/ERC721/ERC721.sol"; 


contract ERC721Mock is ERC721 { 


constructor() ERC721("ERC721Mock", "ERCM") {} 


function mint( 
address to, 
uint256 id 
) public { 


_mint(to, id); 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\mocks/ERC721StrategyMock.sol---- 
// SPDX-License-Identifier: MIT 
pragma solidity *0.8.9; 


pragma experimental ABIEncoderV2; 


import "@openzeppelin/contracts/token/ERC721/IERC721.sol"; 
import "../enums/YieldBoxTokenType.sol"; 

import "../interfaces/IStrategy.sol"; 

import "../interfaces/lYieldBox.sol"; 


import "../ERC721Receiver.sol"; 


// solhint-disable const-name-snakecase 


// solhint-disable no-empty-blocks 


contract ERC721StrategyMock is IStrategy, ERC721Receiver { 
string public constant override name = "ERC721StrategyMock"; 


string public constant override description = "Mock Strategy for testing"; 


TokenType public constant override tokenType = TokenType.ERC721; 


address public immutable override contractAddress; 


uint256 public immutable override tokenld; 


lYieldBox public immutable override yieldBox; 


constructor(lYieldBox yieldBox_, address token, uint256 tokenld_) { 


yieldBox = yieldBox_; 


contractAddress = token; 


tokenld = tokenld_; 


/// Returns the total value the strategy holds (principle + gain) expressed in asset token 

amount. 
/// This should be cheap in gas to retrieve. Can return a bit less than the actual, but 

shouldn't return more. 

/// The gas cost of this function will be paid on any deposit or withdrawal onto and out of 
the YieldBox 

/// that uses this strategy. Also, anytime a protocol converts between shares and amount, 
this gets called. 

function currentBalance() public view override returns (uint256 amount) { 


return IERC721(contractAddress).balanceOf(address(this)); 


/// Returns the maximum amount that can be withdrawn 
function withdrawable() external view override returns (uint256 amount) { 


return IERC721(contractAddress).balanceOf(address(this)); 


/// Returns the maximum amount that can be withdrawn for a low gas fee 
/// When more than this amount is withdrawn it will trigger divesting from the actual 
strategy 
/// which will incur higher gas costs 


function cheapWithdrawable() external view override returns (uint256 amount) { 


return IERC721(contractAddress).balanceOf(address(this)); 


/// \s called by YieldBox to signal funds have been added, the strategy may choose to act 
on this 

/// When a large enough deposit is made, this should trigger the strategy to invest into the 
actual 

/// strategy. This function should normally NOT be used to invest on each call as that 

would be costly 

/// for small deposits. 

/// Only accept this call from the YieldBox 


function deposited(uint256 amount) external override {} 


/// \s called by the YieldBox to ask the strategy to withdraw to the user 
/// When a strategy keeps a little reserve for cheap withdrawals and the requested 
withdrawal goes over this amount, 
/// the strategy should divest enough from the strategy to complete the withdrawal and 
rebalance the reserve. 
/// Only accept this call from the YieldBox 
function withdraw(address to, uint256) external override { 


IERC721(contractAddress).safeTransferFrom(address(this), to, tokenld); 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\mocks/ExternalFunctionMock.sol---- 
// SPDX-License-Identifier: MIT 


pragma solidity *0.8.9; 


contract ExternalFunctionMock { 


event Result(uint256 output); 


function sum(uint256 a, uint256 b) external returns (uint256 c) { 
c =a + b; 


emit Result(c); 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\mocks/MaliciousMasterContractMock.sol 
// SPDX-License-Identifier: MIT 

pragma solidity *0.8.9; 

import "@boringcrypto/boring-solidity/contracts/interfaces/IMasterContract.sol"; 


import "../YieldBox.sol"; 


contract MaliciousMasterContractMock is IMasterContract { 
function init(bytes calldata) external payable override { 


return; 


function attack(YieldBox yieldBox) public { 


yieldBox.setApprovalForAll(address(this), true); 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\mocks/MasterContractFullCycleMock.sol- 


// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.9; 


import "@boringcrypto/boring-solidity/contracts/interfaces/IMasterContract.sol"; 


import "../YieldBox.sol"; 


contract MasterContractFullCycleMock is IMasterContract { 
YieldBox public immutable yieldBox; 
address public deployer; 
address public token; 
address public erc1155; 
IStrategy public tokenStrategy; 
IStrategy public erc1155Strategy; 


IStrategy public ethStrategy; 


constructor(YieldBox _yieldBox) { 


yieldBox = _yieldBox; 


function init(bytes calldata data) external payable override { 
(deployer, token, erc1155, tokenStrategy, ercl1155Strategy, ethStrategy) = abi.decode( 
data, 


(address, address, address, |Strategy, IStrategy, IStrategy) 


); 


return; 


function run() public payable { 


yieldBox.deposit(TokenType.ERC20, token, tokenStrategy, 0, deployer, deployer, 1000, 


yieldBox.deposit(TokenType.ERC20, token, tokenStrategy, 0, deployer, deployer, O, 
1000_00000000); 
uint256 id = yieldBox.ids(TokenType.ERC20, token, tokenStrategy, 0); 
yieldBox.withdraw(id, deployer, deployer, 1000, 0); 


yieldBox.withdraw(id, deployer, deployer, 0, 1000 00000000); 


yieldBox.deposit(TokenType.ERC1155, erc1155, ercl1155Strategy, 42, deployer, 
deployer, 1000, 0); 
yieldBox.deposit(TokenType.ERC1155, erc1155, erc1155Strategy, 42, deployer, 
deployer, 0, 1000_ 00000000); 
id = yieldBox.ids(TokenType.ERC1155, erc1155, erc1155Strategy, 42); 
yieldBox.withdraw(id, deployer, deployer, 1000, 0); 


yieldBox.withdraw(id, deployer, deployer, 0, 1000 00000000); 


yieldBox.depositETH{ value: 1000 }(ethStrategy, deployer, 1000); 


yieldBox.withdraw(id + 1, deployer, deployer, 1000, 0); 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\mocks/MasterContractMock.sol---- 


// SPDX-License-Identifier: UNLICENSED 


pragma solidity *0.8.9; 


import "@boringcrypto/boring-solidity/contracts/interfaces/IMasterContract.sol"; 


import "../YieldBox.sol"; 


contract MasterContractMock is IMasterContract { 


YieldBox public immutable yieldBox; 


constructor(YieldBox _yieldBox) { 


yieldBox = _yieldBox; 


function deposit(uint256 id, uint256 amount) public { 


yieldBox.depositAsset(id, msg.sender, address(this), 0, amount); 


function setApproval() public { 


yieldBox.setApprovalForAll(msg.sender, true); 


function init(bytes calldata) external payable override { 


return; 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\mocks/ReturnFalseERC20Mock.sol---- 
// SPDX-License-Identifier: MIT 


pragma solidity *0.8.9; 


// solhint-disable no-inline-assembly 


// solhint-disable not-rely-on-time 


// ReturnFalseERC20 does not revert on errors, it just returns false 
contract ReturnFalseERC20Mock { 

string public symbol; 

string public name; 

uint8 public immutable decimals; 

uint256 public totalSupply; 

mapping(address => uint256) public balanceOf; 

mapping(address => mapping(address => uint256)) public allowance; 


mapping(address => uint256) public nonces; 


event Transfer(address indexed from, address indexed to, uint256 value); 


event Approval(address indexed owner, address indexed spender, uint256 value); 


constructor( 
string memory name_, 
string memory symbol, 
uint8 decimals _, 


uint256 supply 


name = name; 
symbol = symbol _; 
decimals = decimals ; 
totalSupply = supply; 


balanceOf[msg.sender] = supply; 


function transfer(address to, uint256 amount) public returns (bool success) { 
if (balanceOf[msg.sender] >= amount && balanceOf[to] + amount >= balanceOf[to]) { 
balanceOf[msg.sender] -= amount; 
balanceOf[to] += amount; 
emit Transfer(msg.sender, to, amount); 
return true; 
} else { 


return false; 


function transferFrom( 
address from, 
address to, 
uint256 amount 
) public returns (bool success) { 
if (balanceOf[from] >= amount && allowance[from][msg.sender] >= amount && 
balanceOf[to] + amount >= balanceOf[to]) { 


balanceOf[from] -= amount; 


allowance[from][msg.sender] -= amount; 
balanceOf[to] += amount; 
emit Transfer(from, to, amount); 
return true; 
} else { 


return false; 


function approve(address spender, uint256 amount) public returns (bool success) { 
allowance[msg.sender][spender] = amount; 
emit Approval(msg.sender, spender, amount); 


return true; 


// solhint-disable-next-line func-name-mixedcase 

function DOMAIN _SEPARATOR() public view returns (bytes32) { 
uint256 chainld; 
assembly { 


chainld := chainid() 


return keccak256(abi.encode(keccak256("EIP712Domain(uint256 chainld,address 
verifyingContract)"), chainld, address(this))); 


} 


function permit( 


address owner, 

address spender, 

uint256 value, 

uint256 deadline, 

uint8 v, 

bytes32 r, 

bytes32 s 

) external { 
require(block.timestamp < deadline, "ReturnFalseERC20: Expired"); 
bytes32 digest = keccak256( 
abi.encodePacked( 

"\x19\x01", 
DOMAIN_SEPARATOR(), 
keccak256( 


abi.encode( 


0x6e71edae12b1b97f4d1f60370fef10105fa2faae0126114a169c64845d6126c09, 
owner, 
spender, 
value, 
nonces[owner]++, 


deadline 


address recoveredAddress = ecrecover(digest, v, r, S); 
require(recoveredAddress == owner, "ReturnFalseERC20: Invalid Sig"); 
allowance[owner][spender] = value; 


emit Approval(owner, spender, value); 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\mocks/RevertingERC20Mock.sol---- 
// SPDX-License-Identifier: MIT 


pragma solidity *0.8.9; 


// RevertingERC20 reverts on errors 
contract RevertingERC20Mock { 
string public symbol; 
string public name; 
uint8 public immutable decimals; 
uint256 public totalSupply; 
mapping(address => uint256) public balanceOf; 


mapping(address => mapping(address => uint256)) public allowance; 


event Transfer(address indexed from, address indexed to, uint256 value); 


event Approval(address indexed owner, address indexed spender, uint256 value); 


constructor( 
string memory name_, 
string memory symbol, 
uint8 decimals _, 
uint256 supply 

){ 
name = name; 
symbol = symbol _; 
decimals = decimals ; 


totalSupply = supply; 


balanceOf[msg.sender] = supply; 


emit Transfer(address(0), msg.sender, supply); 


function transfer(address to, uint256 amount) public returns (bool success) { 
require(balanceOf[msg.sender] >= amount, "TokenB: balance too low"); 
require(amount >= 0, "TokenB: amount should be > 0"); 
require(balanceOf[to] + amount >= balanceOf[to], "TokenB: overflow detected"); 
balanceOf[msg.sender] -= amount; 
balanceOf[to] += amount; 
emit Transfer(msg.sender, to, amount); 


return true; 


function transferFrom( 
address from, 
address to, 
uint256 amount 

) public returns (bool success) { 
require(balanceOf[from] >= amount, "TokenB: balance too low"); 
require(allowance[from][msg.sender] >= amount, "TokenB: allowance too low"); 
require(amount >= 0, "TokenB: amount should be >= 0"); 
require(balanceOf[to] + amount >= balanceOf[to], "TokenB: overflow detected"); 
balanceOf[from] -= amount; 
allowance[from][msg.sender] -= amount; 


balanceOf[to] += amount; 


emit Transfer(from, to, amount); 


return true; 


function approve(address spender, uint256 amount) public returns (bool success) { 
allowance[msg.sender][spender] = amount; 
emit Approval(msg.sender, spender, amount); 


return true; 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\mocks/SushiBarMock.sol---- 
// SPDX-License-Identifier: MIT 
pragma solidity *0.8.9; 


import "@boringcrypto/boring-solidity/contracts/ERC20.sol"; 


// solhint-disable const-name-snakecase 


// SushiBar is the coolest bar in town. You come in with some Sushi, and leave with more! 
The longer you stay, the more Sushi you get. 
// This contract handles swapping to and from xSushi, SushiSwap's staking token. 
contract SushiBarMock is ERC20 { 
ERC20 public sushi; 
uint256 public override totalSupply; 
string public constant name = "SushiBar"; 


string public constant symbol = "xSushi"; 


// Define the Sushi token contract 
constructor(ERC20 sushi) { 


sushi = _sushi; 


// Enter the bar. Pay some SUSHIs. Earn some shares. 
// Locks Sushi and mints xSushi 
function enter(uint256 amount) public { 

// Gets the amount of Sushi locked in the contract 


uint256 totalSushi = sushi.balanceOf(address(this)); 


// Gets the amount of xSushi in existence 

uint256 totalShares = totalSupply; 

// If no xSushi exists, mint it 1:1 to the amount put in 
if (totalShares == 0 || totalSushi == 0) { 


_mint(msg.sender, _amount); 


// Calculate and mint the amount of xSushi the Sushi is worth. The ratio will change 
overtime, 
// as xSushi is burned/minted and Sushi deposited + gained from fees / withdrawn. 
else { 
uint256 what = (_amount * totalShares) / totalSushi; 

_mint(msg.sender, what); 
} 
// Lock the Sushi in the contract 


sushi.transferFrom(msg.sender, address(this), amount); 


// Leave the bar. Claim back your SUSHIs. 
// Unclocks the staked + gained Sushi and burns xSushi 
function leave(uint256 share) public { 
// Gets the amount of xSushi in existence 
uint256 totalShares = totalSupply; 
// Calculates the amount of Sushi the xSushi is worth 
uint256 what = (_share * sushi.balanceOf(address(this))) / totalShares; 
_burn(msg.sender, share); 


sushi.transfer(msg.sender, what); 


function mint(address account, uint256 amount) internal { 
totalSupply += amount; 
balanceOf[account] += amount; 


emit Transfer(address(0), account, amount); 


function burn(address account, uint256 amount) internal { 
balanceOf[account] -= amount; 
totalSupply -= amount; 


emit Transfer(account, address(0), amount); 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\mocks/WETH9Mock.sol---- 
// SPDX-License-Identifier: GPL-3.0-only 


pragma solidity *0.8.9; 


contract WETH9Mock { 
string public name = "Wrapped Ether"; 
string public symbol = "WETH"; 


uint8 public decimals = 18; 


event Approval(address indexed src, address indexed guy, uint256 wad); 
event Transfer(address indexed src, address indexed dst, uint256 wad); 
event Deposit(address indexed dst, uint256 wad); 


event Withdrawal(address indexed src, uint256 wad); 


mapping(address => uint256) public balanceOf; 


mapping(address => mapping(address => uint256)) public allowance; 


/*fallback () external payable { 
deposit(); 

pF 

function deposit() public payable { 
balanceOf[msg.sender] += msg.value; 


emit Deposit(msg.sender, msg.value); 


function withdraw(uint256 wad) public { 


require(balanceOf[msg.sender] >= wad, "WETH9: Error"); 
balanceOf[msg.sender] -= wad; 

bool success; 

(success, ) = msg.sender.call{ value: wad }(""); 


emit Withdrawal(msg.sender, wad); 


function totalSupply() public view returns (uint256) { 


return address(this).balance; 


function approve(address guy, uint256 wad) public returns (bool) { 
allowance[msg.sender][guy] = wad; 
emit Approval(msg.sender, guy, wad); 


return true; 


function transfer(address dst, uint256 wad) public returns (bool) { 


return transferFrom(msg.sender, dst, wad); 


function transferFrom( 
address src, 
address dst, 
uint256 wad 


) public returns (bool) { 


require(balanceOf[src] >= wad, "WETHS9: Error"); 


if (src != msg.sender && allowance[src][msg.sender] != type(uint256).max) { 


require(allowance[src][msg.sender] >= wad, "WETH9: Error"); 


allowance[src][msg.sender] -= wad; 


balanceOf[src] -= wad; 


balanceOf[dst] += wad; 


emit Transfer(src, dst, wad); 


return true; 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\mocks/YieldBoxRebaseMock.sol---- 
// SPDX-License-Identifier: MIT 

pragma solidity *0.8.9; 

pragma experimental ABIEncoderV2; 


import "../YieldBox.sol"; 


contract YieldBoxRebaseMock { 


using YieldBoxRebase for uint256; 


uint256 public totalAmount; 


uint256 public totalShares; 


function toShare(uint256 amount, bool roundUp) public view returns (uint256 share) { 


share = amount. toShares(totalShares, totalAmount, roundUp); 


function toAmount(uint256 share, bool roundUp) public view returns (uint256 amount) { 


amount = share. toAmount(totalShares, total[Amount, roundUp); 


function deposit(uint256 share, uint256 amount) public returns (uint256 shareOut, 
uint256 amountOut) { 
if (share == 0) { 
// value of the share may be lower than the amount due to rounding, that's ok 
share = amount._toShares(totalShares, totalAmount, false); 


} else { 


// amount may be lower than the value of share due to rounding, in that case, add 1 


to amount (Always round up) 


amount = share. toAmount(totalShares, totalAmount, true); 
} 
totalAmount += amount; 
totalShares += share; 


return (share, amount); 


function withdraw(uint256 share, uint256 amount) public returns (uint256 shareOut, 


uint256 amountOut) { 
if (Share == 0) { 


// value of the share paid could be lower than the amount paid due to rounding, in 


that case, add a share (Always round up) 


share = amount._toShares(totalShares, totalAmount, true); 


} else { 


// amount may be lower than the value of share due to rounding, that's ok 


amount = share. toAmount(totalShares, totalAmount, false); 


totalAmount -= amount; 
totalShares -= share; 


return (share, amount); 


function gain(uint256 amount) public { 


totalAmount += amount; 


function lose(uint256 amount) public { 


totalAmount -= amount; 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\samples/Escrow.sol---- 
// SPDX-License-Identifier: MIT 
pragma solidity *0.8.9; 


import "../YieldBox.sol"; 


struct Offer { 
address owner; 
uint256 assetFrom; 
uint256 assetTo; 
uint256 shareFrom; 
uint256 shareTo; 


bool closed; 


contract Escrow { 


YieldBox public yieldBox; 


constructor(YieldBox _yieldBox) { 


yieldBox = _yieldBox; 


Offer[] public offers; 


function make( 


uint256 assetFrom, 


uint256 assetTo, 


uint256 shareFrom, 
uint256 shareTo 
) public { 


offers.push(Offer(msg.sender, assetFrom, assetTo, shareFrom, shareTo, false)); 


function take(uint256 offerld) public { 
Offer memory offer = offers[offerld]; 
yieldBox.transfer(msg.sender, offer.owner, offer.assetFrom, offer.shareFrom); 
yieldBox.transfer(offer.owner, msg.sender, offer.assetTo, offer.shareTo); 


offers[offerld].closed = true; 


function cancel(uint256 offerld) public { 
require(offers[offerld].owner == msg.sender); 


offers[offerld].closed = true; 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\samples/helloworld.sol---- 


// SPDX-License-lIdentifier: MIT 
pragma solidity *0.8.9; 


import "../YieldBox.sol"; 


// An example a contract that stores tokens in the YieldBox. 
// PS. This isn't good code, just kept it simple to illustrate usage. 
contract HelloWorld { 

YieldBox public immutable yieldBox; 


uint256 public immutable assetld; 


constructor(YieldBox _yieldBox, IERC20 token) { 
yieldBox = _yieldBox; 
assetlId = _yieldBox.registerAsset(TokenType.ERC20, 
IStrategy(address(0)), 0); 


} 


mapping(address => uint256) public yieldBoxShares; 


address(token), 


// Deposits an amount of token into the YieldBox. YieldBox shares are given to the 


HelloWorld contract and 
// assigned to the user in yieldBoxShares. 
// Don't deposit twice, you'll lose the first deposit ;) 
function deposit(uint256 amount) public { 


uint256 shares; 


(, shares) = yieldBox.depositAsset(assetld, msg.sender, address(this), amount, 0); 


yieldBoxShares[msg.sender] += shares; 


// This will return the current value in amount of the YieldBox shares. 

// Through a strategy, the value can go up over time, although in this example no strategy 
is selected. 

function balance() public view returns (uint256 amount) { 


return yieldBox.toAmount(assetld, yieldBoxShares[msg.sender], false); 


// Withdraw all shares from the YieldBox and receive the token. 
function withdraw() public { 
yieldBox.withdraw(assetld, address(this), msg.sender, 0, yieldBoxShares[msg.sender]); 


yieldBoxShares[msg.sender] = 0; 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\samples/Options.sol---- 
// SPDX-License-Identifier: MIT 
pragma solidity *0.8.9; 


import "../YieldBox.sol"; 


// Thanks to 


// - BookyPooBah - numToBytes 


// TODO: 
// Gas: Reduce where safe 
// Docs: Document every line in the contract 


// Check: Get extreme decimal examples, does exercise work ok? 


// price: this is the price of 10*18 base units of asset (ignoring decimals) as expressed in 


base units of currency (also ignoring decimals) 


// The frontend is responsible for making the simple calculation so the code can stay decimal 
agnostic and simple 

// For example, the price of 1 CVC (has 8 decimals) in the currency DAI (18 decimals): 

// 1 CVC = 0.0365 DAI 

// 1 * 810 base units of CVC = 0.0365 DAI (CVC has 8 decimals) 

// 1 * 8*10 base units of CVC = 0.0365 * 10*18 base units of DAI (DAI has 18 decimals) 

// 1 * 18^10 base units of CVC = 0.0365 * 10*28 base units of DAI (Multiply by 10^10 in 
this case to get to 10^18 base units) 


// Price = 0.0365 * 10*28 = 365000000000000000000000000 


// Design decisions and rationale 


// Use of block.timestamp 

// While blocknumber is more 'exact', block.timestamp is easier to understand for users and 
more predictable 

// So while it can be slightly manipulated by miners, this is not an issue on the timescales 


options operate at 


// solhint-disable not-rely-on-time 


library String { 
bytesl1 private constant DOT = bytes1(uint8(46)); 


bytesl private constant ZERO = bytes1(uint8(48)); 


function numToString(uint256 number, uint8 decimals) internal pure returns (string 
memory) { 
uint256 i; 
uint256 j; 
uint256 result; 
bytes memory b = new bytes(40); 
if (number == 0) { 
b[j++] = ZERO; 
} else { 
i = decimals + 18; 
do { 


uint256 num = number / 10**i; 


result = result * 10 + (num % 10); 
if (result > 0) { 
b[j++] = bytesl(uint8((num % 10) + uint8(ZERO))); 
if ((j > 1) && (number == num * 10**i) && (i <= decimals)) { 
break; 
} 
} else { 
if (i == decimals) { 
b[j++] = ZERO; 
b[j++] = DOT; 
} 
if (i < decimals) { 


b[j++] = ZERO; 


} 
if (decimals '= 0 && decimals == i && result > 0 && i > 0) { 


b[j++] = DOT; 


r 


} while (i >= 0); 


bytes memory out = new bytes(j); 
for (uint256 x = 0; x < j; x++) { 


out[x] = b[x]; 


return string(out); 


struct Option { 
uint32 asset; // Allows for up to 4B assets 
uint32 currency; 
uint32 expiry; 
uint32 optionAssetld; 
uint32 minterAssetld; 


uint256 price; 


contract YieldOptions { 


YieldBox public yieldBox; 


constructor(YieldBox _yieldBox) { 


yieldBox = _yieldBox; 


Option[] public options; 


function create( 
uint32 asset, 
uint32 currency, 


uint128 price, 


uint32 expiry 
) public returns (uint256 optionld) { 

Option memory option; 

option.asset = asset; 

option.currency = currency; 

option.price = price; 

option.expiry = expiry; 

option.optionAssetld = yieldBox.createToken( 
"YieldOption", 
string( 


abi.encodePacked( 


yo", 
yieldBox.symbol(option.asset), 


ny 
: LA 


yieldBox.symbol(option.currency), 


"N 
r 


String.numToString(option.price, yieldBox.decimals(option.currency)) 


option.minterAssetld = yieldBox.createToken( 
"YieldOptionMinter", 
string( 


abi.encodePacked( 


"ym 
yieldBox.symbol(option.asset), 


nyu 
x LA 


yieldBox.symbol(option.currency), 


String.numToString(option.price, yieldBox.decimals(option.currency)) 


optionld = options.length; 


options.push(option); 


event Mint(uint256 optionld, address indexed by, uint256 amount); 
event Withdraw(uint256 optionld, address indexed by, uint256 amount); 
event Exercise(uint256 optionid, address indexed by, uint256 amount); 


event Swap(uint256 optionid, address indexed by, uint256 assetAmount); 


[** 
* @dev Mint options. 
* @param amount The amount to mint expressed in units of currency. 


function mint( 


uint256 optionld, 

uint256 amount, 

address optionTo, 

address minterTo 
) public { 


Option storage option = options[optionld]; 


require(block.timestamp < option.expiry, "Option expired"); 


require(yieldBox.totalSupply(option.asset) == 0, "Options exercised, no minting"); 


// Step 1. Receive amount base units of currency. This is held in the contract to be paid 


when the option is exercised. 


yieldBox.transfer(msg.sender, address(this), option.asset, amount); 


// Step 2. Mint option tokens 


yieldBox.mint(option.optionAssetlid, optionTo, amount); 


// Step 3. Mint issue tokens 


yieldBox.mint(option.minterAssetld, minterTo, amount); 


// EVENTS 


emit Mint(optionld, msg.sender, amount); 


[** 


* @dev Withdraw from the pool. Asset and currency are withdrawn to the 


proportion 


n 


which they are exercised. 
* @param amount The amount to withdraw expressed in units of the option. 
*/ 
function withdraw( 
uint256 optionld, 
uint256 amount, 
address to 
) public { 


Option storage option = options[optionld]; 


// CHECKS 


require(block.timestamp >= option.expiry, "Option not yet expired"); 


// EFFECTS 

yieldBox.transfer( 

address(this), 

to, 

option.asset, 

(yieldBox.totalSupply(option.currency) * amount) 

yieldBox.totalSupply(option.minterAssetld) 

); 

yieldBox.transfer( 

address(this), 

to, 

option.asset, 


(yieldBox.totalSupply(option.currency) * amount) 


yieldBox.totalSupply(option.minterAssetld) 
); 


yieldBox.burn(option.minterAssetld, msg.sender, amount); 


// EVENTS 


emit Withdraw(optionld, msg.sender, amount); 


[** 
* @dev Withdraw from the pool before expiry by returning the options. 
* In this case Assets are withdrawn first if available. Only currency is returned if assets 
run to 0. 

* @param amount The amount to withdraw expressed in units of the option. 
ay 
function withdrawEarly( 

uint256 optionld, 

uint256 amount, 

address to 
) public { 


Option storage option = options[optionld]; 


// CHECKS 


require(block.timestamp < option.expiry, "Option not yet expired"); 


// EFFECTS 


yieldBox.burn(option.optionAssetld, msg.sender, amount); 


yieldBox.burn(option.minterAssetid, msg.sender, amount); 


// Step 3. Receive from the asset pool 
uint256 assetAmount; 
uint256 currencyAmount; 


uint256 totalAsset = yieldBox.totalSupply(option.asset); 


if (totalAsset > 0) { 
// The amount fully in Assets 


assetAmount = (amount * 1e18) / option.price; 


// \f there aren't enough Assets in the contract, use as much as possible and get the 
rest from currency 
if (assetAmount > totalAsset) { 
currencyAmount = ((assetAmount - totalAsset) * option.price) / 1e18; 
assetAmount = totalAsset; 
} 
} else { 


currencyAmount = amount; 


yieldBox.transfer(address(this), to, option.currency, currencyAmount); 


yieldBox.transfer(address(this), to, option.asset, assetAmount); 


// EVENTS 


emit Withdraw(optionld, msg.sender, amount); 


[** 

* @dev Exercise options. 

* @param amount The amount to exercise expressed in units of currency. 
*/ 

function exercise(uint256 optionld, uint256 amount) public { 


Option storage option = options[optionld]; 


require(block.timestamp < option.expiry, "Option has expired"); 


yieldBox.burn(option.optionAssetld, msg.sender, amount); 
yieldBox.transfer(msg.sender, address(this), option.asset, (amount * 1e18) / 
option.price); 


yieldBox.transfer(address(this), msg.sender, option.currency, amount); 


emit Exercise(optionid, msg.sender, amount); 


[** 
* @dev If some of the options are exercised, but the price of the asset goes back up, 
anyone can 
* swap the assets for the original currency. The main reason for this is that minted gets 
locked 
* once any option is exercised. When all assets are swapped back for currency, further 


minting 


* can happen again. 
* @param assetAmount The amount to swap. This is denominated in asset (NOT 
currency!) so it's always possible to swap ALL 

* assets, and rounding won't leave dust behind. 
*/ 
function swap( 

uint256 optionld, 

uint256 assetAmount, 

address to 
) public { 


Option storage option = options[optionld]; 


uint256 currencyAmount = (assetAmount * option.price) / 1e18; 
yieldBox.transfer(msg.sender, address(this), option.currency, currencyAmount); // 
TODO: Round up 
yieldBox.transfer(address(this), msg.sender, option.asset, assetAmount); 


yieldBox.mint(option.optionAssetlid, to, currencyAmount); 


// EVENTS 


emit Swap(optionld, msg.sender, currencyAmount); 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\samples/salary.sol---- 
// SPDX-License-Identifier: MIT 

pragma solidity *0.8.9; 

pragma experimental ABIEncoderV2; 


import "../YieldBox.sol"; 


// solhint-disable not-rely-on-time 


// IDEA: Make changes to salaries, funder or recipient 


// IDEA: Enable partial withdrawals 


contract Salary is BoringBatchable { 


YieldBox public yieldBox; 


event LogCreate( 
address indexed funder, 
address indexed recipient, 
uint256 indexed assetld, 
uint32 cliffTimestamp, 
uint32 endTimestamp, 
uint32 cliffPercent, 
uint256 totalShare, 
uint256 salaryld 

); 

event LogWithdraw(uint256 indexed salaryld, address indexed to, uint256 share); 


event LogCancel(uint256 indexed salaryld, address indexed to, uint256 share); 


constructor(YieldBox _yieldBox) { 


yieldBox = _yieldBox; 


/// now clifffimestamp 


IU | | endTimestamp 


Hi, =777------------------------------------- 
struct UserSalary { 
// The funder of the salary, the one who can cancel it 
address funder; 
// The recipient of the salary 
address recipient; 
// The ERC20 token 


uint256 assetld; 


// The amount of share that the recipient has already withdrawn 
uint256 withdrawnShare; 

// The timestamp of the cliff (also the start of the slope) 

uint32 cliffTimestamp; 

// The timestamp of the end of vesting (the end of the slope) 
uint32 endTimestamp; 

// The cliff payout in percent of the share 

uint64 cliffPercent; 

// The total payout in share 


uint256 share; 


/// Array of all salaries managed by the contract 


UserSalary[] public salaries; 


function salaryCount() public view returns (uint256) { 


return salaries.length; 


/// Create a salary 
function create( 
address recipient, 
uint256 assetld, 
uint32 cliffTimestamp, 
uint32 endTimestamp, 


uint32 cliffPercent, 


uint128 amount 
) public returns (uint256 salaryld, uint256 share) { 
// Check that the end if after or equal to the cliff 
// If they are equal, all share become payable at once, use this for a fixed term lockup 
require(clifffimestamp <= endTimestamp, "Salary: cliff > end"); 
// You cannot have a cliff greater than 100%, important check, without the contract will 
lose funds 


require(cliffPercent <= 1e18, "Salary: cliff too large"); 


// Fund this salary using the funder's YieldBox balance. Convert the amount to share, 
then transfer the share 
share = yieldBox.toShare(assetid, amount, false); 


yieldBox.transfer(msg.sender, address(this), assetld, share); 


salaryld = salaries.length; 

UserSalary memory salary; 
salary.funder = msg.sender; 
salary.recipient = recipient; 
salary.assetld = assetld; 
salary.clifffimestamp = clifffimestamp; 
salary.endTimestamp = endTimestamp; 
salary.cliffPercent = cliffPercent; 
salary.share = share; 


salaries.push(salary); 


emit LogCreate(msg.sender, recipient, assetld, cliffTimestamp, endTimestamp, 


cliffPercent, share, salaryld); 


} 


function available(UserSalary memory salary) internal view returns (uint256 share) { 
if (block.timestamp < salary.clifffimestamp) { 
// Before the cliff, none is available 
share = 0; 
} else if (block.timestamp >= salary.endTimestamp) { 
// After the end, all is available 
share = sSalary.share; 


} else { 


// In between, cliff is available, rest according to slope 


// Time that has passed since the cliff 
uint256 timeSinceCliff = block.timestamp - salary.cliffTimestamp; 
// Total time period of the slope 
uint256 timeSlope = salary.endTimestamp - salary.clifffimestamp; 
uint256 payablePercent = salary.cliffPercent; 
if (timeSinceCliff > 0) { 
// The percentage paid out during the slope 
uint256 slopePercent = 100 - salary.cliffPercent; 
// The percentage payable on the slope added to the cliff percentage 


payablePercent += ((slopePercent * timeSinceCliff) / timeSlope); 
} 


// The share payable 


share = (salary.share * payablePercent) / 100; 


// Remove any share already withdrawn 


share -= salary.withdrawnShare; 


// Get the number of share currently available for withdrawal by salaryld 
function available(uint256 salaryld) public view returns (uint256 share) { 


share = _available(salaries[salaryld]); 


function info(uint256 salaryld) 

public 

view 

returns ( 
address funder, 
address recipient, 
uint256 assetld, 
uint256 withdrawnAmount, 
uint32 cliffTimestamp, 
uint32 endTimestamp, 
uint64 cliffPercent, 
uint256 amount, 


uint256 availableAmount 


funder = salaries[salaryld].funder; 
recipient = salaries[salaryld].recipient; 
assetid = salaries[salaryld].assetld; 
clifffimestamp = salaries[salaryld].cliffTimestamp; 
endTimestamp = salaries[salaryld].endTimestamp; 
cliffPercent = salaries[salaryld].cliffPercent; 
amount = yieldBox.toAmount(salaries[salaryld].assetld, salaries[salaryld].share, false); 
withdrawnAmount = yieldBox.toAmount(salaries[salaryld].assetld, 
salaries[Salaryld].withdrawnShare, false); 
availableAmount = _ yieldBox.toAmount(salaries[salaryld].assetld, 
_available(salaries[salaryld]), false); 


} 


function withdraw(uint256 salaryld, address to) internal { 
uint256 pendingShare = _available(salaries[salaryld]); 
salaries[salaryld].withdrawnShare += pendingShare; 
yieldBox.transfer(address(this), to, salaries[salaryld].assetld, pendingShare); 


emit LogWithdraw(salaryld, to, pendingShare); 


// Withdraw the maximum amount possible for a salaryld 
function withdraw(uint256 salaryld, address to) public { 
// Only pay out to the recipient 
require(Salaries[salaryld].recipient == msg.sender, "Salary: not recipient"); 


_withdraw(salaryld, to); 


// Modifier for functions only allowed by the funder 
modifier onlyFunder(uint256 salaryld) { 


require(Salaries[salaryld].funder == msg.sender, "Salary: not funder"); 


// Cancel a salary, can only be done by the funder 
function cancel(uint256 salaryld, address to) public onlyFunder(salaryld) { 
// Pay the recipient all accrued funds 
_withdraw(salaryld, salaries[salaryld].recipient); 
// Return the rest to the funder 
uint256 shareLeft = salaries[salaryld].share - salaries[salaryld].withdrawnShare; 
yieldBox.transfer(address(this), to, salaries[salaryld].assetld, shareLeft); 


emit LogCancel(salaryld, to, shareLeft); 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\samples/Tokenizer.sol---- 
// SPDX-License-Identifier: MIT 
pragma solidity *0.8.9; 


import "../YieldBox.sol"; 


contract Tokenizer { 


YieldBox public yieldBox; 


constructor(YieldBox _yieldBox) { 


yieldBox = _yieldBox; 


mapping(uint256 => uint256) tokenizedAsset; 


function deposit(uint256 sourceAsset, uint256 share) public { 
uint256 assetid = tokenizedAsset[sourceAsset]; 
if (assetlId == 0) { 
yieldBox.createToken( 
string(string.concat("Tokenized ", bytes(yieldBox.name(sourceAsset)))), 
string(string.concat("t", bytes(yieldBox.symbol(sourceAsset)))), 


18, 


yieldBox.transfer(msg.sender, address(this), sourceAsset, share); 


yieldBox.mint(assetld, msg.sender, share * 1e18); 


function withdraw(uint256 sourceAsset, uint256 share) public { 
uint256 assetid = tokenizedAsset[sourceAsset]; 
yieldBox.burn(assetld, msg.sender, share * 1e18); 


yieldBox.transfer(address(this), msg.sender, sourceAsset, share); 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\samples/YieldApp.sol---- 
// SPDX-License-Identifier: MIT 

pragma solidity *0.8.9; 

pragma experimental ABIEncoderV2; 


import "../YieldBox.sol"; 


contract YieldApp { 


using YieldBoxRebase for uint256; 


YieldBox public yieldBox; 


constructor(YieldBox _yieldBox) { 


yieldBox = _yieldBox; 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\samples/YieldSwap.sol---- 
// SPDX-License-lIdentifier: GPL-3 

// Uniswap V2 for YieldBox (https://github.com/Uniswap/v2-core) 

pragma solidity *0.8.9; 


import "../YieldBox.sol"; 


struct Pair { 
uint128 reserveO; 
uint128 reservel; 
uint32 asset0; 
uint32 asset]; 
uint32 IpAssetld; 


uint256 kLast; 


contract YieldSwap { 


using BoringMath for uint256; 


YieldBox public yieldBox; 


constructor(YieldBox _yieldBox) { 


yieldBox = _yieldBox; 


uint256 public constant MINIMUM_LIQUIDITY = 10 ** 3; 


Pair[] public pairs; 


mapping(uint256 => mapping(uint256 => uint256)) public pairLookup; 


event Mint(address indexed sender, uint256 amountO, uint256 amount1); 
event Burn(address indexed sender, uint256 amountO, uint256 amount1, address indexed 
to); 
event Swap(address indexed sender, uint256 amountOln, uint256 amountlIn, uint256 
amount0Out, uint256 amount1Out, address indexed to); 


event Sync(uint112 reserveO, uint112 reservel); 


function create(uint32 assetO, uint32 asset1) public returns (uint256 pairld) { 
if (assetO > asset1) { 


(assetO, asset1) = (asset1, asset0O); 


uint32 lpAssetid = yieldBox.createToken("YieldBox LP Token", "YLP", 18, ""); 
pairld = pairs.length; 
pairLookup[assetO][asset1] = pairld; 


pairs.push(Pair(0O, 0, assetO, asset1, lpAssetid, 0)); 


function mint(uint256 pairld, address to) external returns (uint256 liquidity) { 


Pair storage pair = pairs[pairld]; 


uint256 balanced = yieldBox.balanceOf(address(this), pair.asset0O); 


uint256 balancel = yieldBox.balanceOf(address(this), pair.asset1); 


uint256 amountO = balanceoO - pair.reserveO; 


uint256 amountl = balancel - pair.reservel1; 


uint256 totalSupply = yieldBox.totalSupply(pair.lpAssetid); 
if ( totalSupply == 0) { 
liquidity = Math.sqrt(amountO * amount1) - MINIMUM_LIQUIDITY; 
yieldBox.mint(pair.lpAssetid, address(0), MINIMUM LIQUIDITY); 
} else { 
liquidity = Math.min((amountO * _totalSupply) / pair.reserveO, (amountl * 
_totalSupply) / pair.reservel); 
} 
require(liquidity > 0, "YieldSwap: Not enough mint"); 


yieldBox.mint(pair.lpAssetld, to, liquidity); 


pair.reserveO = balance0.to128(); 


pair.reservel = balancel.to128(); 


function burn(uint256 pairld, address to) external returns (uint256 shareO, uint256 
sharel) { 


Pair storage pair = pairs[pairld]; 


uint256 balanceO = yieldBox.balanceOf(address(this), pair.asset0O); 
uint256 balancel = yieldBox.balanceOf(address(this), pair.asset1); 


uint256 liquidity = yieldBox.balanceOf(address(this), pair.lpAssetld); 


uint256 totalSupply = yieldBox.totalSupply(pair.lpAssetid); 
ShareO = (liquidity * balanceO) / totalSupply; // using balances ensures pro-rata 


distribution 


sharel (liquidity * balancel1) / totalSupply; // using balances ensures pro-rata 
distribution 
require(ShareO > 0 && sharel > 0, "YieldSwap: Not enough"); 
yieldBox.burn(pair.l|pAssetid, address(this), liquidity); 


yieldBox.transfer(address(this), to, pair.assetO, shareO); 


yieldBox.transfer(address(this), to, pair.assetl, sharel); 


pair.reserveO = yieldBox.balanceOf(address(this), pair.assetO).to128(); 


pair.reservel = yieldBox.balanceOf(address(this), pair.asset1).to128(); 


function swap(uint256 pairld, uint256 shareOOut, uint256 sharelOut, address to) external 


{ 
Pair storage pair = pairs[pairld]; 
require(shareOOut > 0 || sharelOut > 0, "YieldSwap: Output too low"); 
require(shareOOut < pair.reserveO && sharelOut < pair.reservel, "YieldSwap: Liquidity 
too low"); 


yieldBox.transfer(address(this), to, pair.assetO, shareOOut); 


yieldBox.transfer(address(this), to, pair.asset1, share1Out); 


uint256 balanced = yieldBox.balanceOf(address(this), pair.asset0O); 


uint256 balancel = yieldBox.balanceOf(address(this), pair.asset1); 


uint256 shareOIn = balanceO > pair.reserveO - shareOOut ? balanced - (pair.reserveO - 
ShareOOut) : 0; 

uint256 sharelln = balancel > pair.reservel - sharelOut ? balancel - (pair.reservel - 
Share1Out) : 0; 

require(shareOIn > 0 || sharelln > 0, "YieldSwap: No input"); 


require(balanceO * balancel >= pair.reserveO * pair.reservel, "YieldSwap: K"); 


pair.reserveO = balance0.to128(); 


pair.reservel = balancel.to128(); 


// force balances to match reserves 
function skim(uint256 pairld, address to) external { 


Pair storage pair = pairs[pairld]; 


yieldBox.transfer(address(this), to, pair.assetO, yieldBox.balanceOf(address(this), 
pair.assetO) - pair.reserveO); 

yieldBox.transfer(address(this), to, pair.assetl, yieldBox.balanceOf(address(this), 
pair.asset1) - pair.reservel); 


} 


// force reserves to match balances 
function sync(uint256 pairld) external { 


Pair storage pair = pairs[pairld]; 


pair.reserveO = yieldBox.balanceOf(address(this), pair.assetO).to128(); 


pair.reservel = yieldBox.balanceOf(address(this), pair.asset1).to128(); 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\samples\lending/lOracle.sol---- 
// SPDX-License-Identifier: MIT 


pragma solidity ^0.8.9; 


interface lOracle { 
/// @notice Get the latest exchange rate. 
/// @param data Usually abi encoded, implementation specific data that contains 
information and arguments to & about the oracle. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return success if no valid (recent) rate is available, return false else true. 
/// @return rate The rate of the requested asset / pair / pool. 


function get(bytes calldata data) external returns (bool success, uint256 rate); 


/// @notice Check the last exchange rate without any state changes. 
/// @param data Usually abi encoded, implementation specific data that contains 
information and arguments to & about the oracle. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return success if no valid (recent) rate is available, return false else true. 
/// @return rate The rate of the requested asset / pair / pool. 


function peek(bytes calldata data) external view returns (bool success, uint256 rate); 


/// @notice Check the current spot exchange rate without any state changes. For oracles 


like TWAP this will be different from peek(). 
/// @param data Usually abi encoded, implementation specific data that contains 
information and arguments to & about the oracle. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return rate The rate of the requested asset / pair / pool. 


function peekSpot(bytes calldata data) external view returns (uint256 rate); 


/// @notice Returns a human readable (short) name about this oracle. 
/// @param data Usually abi encoded, implementation specific data that contains 
information and arguments to & about the oracle. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return (string) A human readable symbol name about this oracle. 


function symbol(bytes calldata data) external view returns (string memory); 


/// @notice Returns a human readable name about this oracle. 
/// @param data Usually abi encoded, implementation specific data that contains 
information and arguments to & about the oracle. 
/// For example: 
/// (string memory collateralSymbol, string memory assetSymbol, uint256 division) = 
abi.decode(data, (string, string, uint256)); 
/// @return (string) A human readable name about this oracle. 


function name(bytes calldata data) external view returns (string memory); 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\samples\lending/ISwapper.sol---- 
// SPDX-License-Identifier: MIT 
pragma solidity *0.8.9; 


import "@boringcrypto/boring-solidity/contracts/interfaces/IERC20.sol"; 


interface ISwapper { 
/// @notice Withdraws 'amountFrom' of token 'from' from the BentoBox account for this 
swapper. 
/// Swaps it for at least 'amountToMin' of token 'to'. 
/// Transfers the swapped tokens of 'to' into the BentoBox using a plain ERC20 transfer. 
/// Returns the amount of tokens 'to' transferred to BentoBox. 
/// (The BentoBox skim function will be used by the caller to get the swapped funds). 
function swap( 
uint256 fromAssetld, 
uint256 toAssetld, 
address recipient, 
uint256 shareToMin, 
uint256 shareFrom 


) external returns (uint256 extraShare, uint256 shareReturned); 


/// @notice Calculates the amount of token ‘from' needed to complete the swap 
(amountFrom), 
/// this should be less than or equal to amountFromMax. 
/// Withdraws 'amountFrom' of token 'from' from the BentoBox account for this swapper. 
/// Swaps it for exactly 'exactAmountTo' of token 'to'. 


/// Transfers the swapped tokens of 'to' into the BentoBox using a plain ERC20 transfer. 


/// Transfers allocated, but unused 'from' tokens within the BentoBox to 'refundTo' 
(amountFromMax - amountFrom). 

/// Returns the amount of 'from' tokens withdrawn from BentoBox (amountFrom). 
/// (The BentoBox skim function will be used by the caller to get the swapped funds). 
function swapExact( 

uint256 fromAssetld, 

uint256 toAssetld, 

address recipient, 

address refundTo, 

uint256 shareFromSupplied, 

uint256 shareToExact 


) external returns (uint256 shareUsed, uint256 shareReturned); 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\samples\lending/Lending.sol---- 
// SPDX-License-lIdentifier: UNLICENSED 

pragma solidity *0.8.9; 

pragma experimental ABIEncoderV2; 

import "@boringcrypto/boring-solidity/contracts/BoringOwnable.sol"; 

import "@boringcrypto/boring-solidity/contracts/ERC20.sol"; 

import "@boringcrypto/boring-solidity/contracts/interfaces/IMasterContract.sol"; 
import "@boringcrypto/boring-solidity/contracts/libraries/BoringRebase.sol"; 
import "@boringcrypto/boring-solidity/contracts/libraries/BoringERC20.sol"; 
import "./lOracle.sol"; 

import "./I[Swapper.sol"; 


import "../../YieldBox.sol"; 


// Isolated Lending 


// Quick port, most certainly broken... very broken 


// Copyright (c) 2021, 2022 BoringCrypto - All rights reserved 


// Twitter: @Boring_Crypto 


// Special thanks to: 


// @OxKeno - for all his invaluable contributions 


// solhint-disable avoid-low-level-calls 
// solhint-disable no-inline-assembly 


// solhint-disable not-rely-on-time 


struct Market { 

uint32 collateral; 

uint32 asset; 

lOracle oracle; 

bytes oracleData; 

// Collateral 

uint256 totalCollateralShare; // Total collateral supplied is yieldBox shares 

mapping(address => uint256) userCollateralShare; // Amount of collateral per user in 

yieldBox shares 

// Assets 

uint256 totalAssetShares; 

// totalAssetFractions and userAssetFraction are stored as the ERC1155 totalSupply and 


balanceOf in yieldBox 


// Borrow 

// elastic = Total token amount to be repayed by borrowers 

// base = Total parts of the debt held by borrowers 

Rebase totalBorrow; 

// User balances 

mapping(address => uint256) userBorrowPart; 

/// @notice Exchange and interest rate tracking. 

/// This is 'cached' here because calls to Oracles can be very expensive. 
uint256 exchangeRate; 

uint64 interestPerSecond; 


uint64 lastAccrued; 


uint32 assetld; 


/// @title LendingPair 

contract LendingPair is IMasterContract { 
using RebaseLibrary for Rebase; 
using BoringERC20 for IERC20; 


using BoringMath for uint256; 


event LogExchangeRate(uint256 rate); 
event LogAccrue(uint256 accruedAmount, uint64 rate, uint256 utilization); 
event LogAddCollateral(address indexed from, address indexed to, uint256 share); 
event LogAddAsset(address indexed from, address indexed to, uint256 share, uint256 
fraction); 
event LogRemoveCollateral(address indexed from, address indexed to, uint256 share); 
event LogRemoveAsset(address indexed from, address indexed to, uint256 share, uint256 
fraction); 
event LogBorrow(address indexed from, address indexed to, uint256 amount, uint256 
part); 
event LogRepay(address indexed from, address indexed to, uint256 amount, uint256 
part); 
event LogLiquidate(uint256 indexed marketlid, address indexed user, uint256 borrowPart, 


address to, ISwapper swapper); 


// lmmutables (for MasterContract and all clones) 


YieldBox public immutable yieldBox; 


LendingPair public immutable masterContract; 


mapping(uint256 => Market) public markets; 


uint256[] public marketList; 


// Settings for the Medium Risk LendingPair 

uint256 private constant COLLATERIZATION_RATE = 75000; // 75% 

uint256 private constant COLLATERIZATION_RATE_PRECISION = 1e5; // Must be less than 
EXCHANGE_RATE_PRECISION (due to optimization in math) 

uint256 private constant MINIMUM _TARGET_UTILIZATION = 7e17; // 70% 

uint256 private constant MAXIMUM_TARGET_UTILIZATION = 8e17; // 80% 

uint256 private constant UTILIZATION PRECISION = 1e18; 

uint256 private constant FULL_UTILIZATION = 1e18; 

uint256 private constant FULL UTILIZATION MINUS MAX = FULL UTILIZATION - 

MAXIMUM_TARGET_UTILIZATION; 


uint256 private constant FACTOR_PRECISION = 1e18; 


uint64 private constant STARTING_INTEREST_ PER_SECOND = 317097920; // approx 1% 
APR 

uint64 private constant MINIMUM_INTEREST_PER_SECOND = 79274480; // approx 0.25% 
APR 

uint64 private constant MAXIMUM_INTEREST_PER_SECOND = 317097920000; // approx 
1000% APR 

uint256 private constant INTEREST ELASTICITY = 28800e36; // Half or double in 28800 


seconds (8 hours) if linear 


uint256 private constant EXCHANGE_RATE_PRECISION = 1e18; 


uint256 private constant LIQUIDATION MULTIPLIER = 112000; // add 12% 


uint256 private constant LIQUIDATION _MULTIPLIER_PRECISION = 1e5; 


/// @notice The constructor is only used for the initial master contract. Subsequent clones 
are initialised via ‘init’. 
constructor(YieldBox yieldBox_) { 
yieldBox = yieldBox_; 


masterContract = this; 


/// @notice No clones are used 
function init(bytes calldata) public payable override { 


revert("No clones"); 


function createMarket( 
uint32 collateral_, 
uint32 asset, 
lOracle oracle, 
bytes calldata oracleData_ 
) public { 
uint32 marketld = yieldBox.createToken( 
string(abi.encodePacked(yieldBox.name(collateral_), "/", yieldBox.name(asset_), "-", 


oracle_.name(oracleData_))), 


string(abi.encodePacked(yieldBox.symbol(collateral_), "/", yieldBox.symbol(asset_), 
"=", oracle_.symbol(oracleData_))), 


18, 


Market storage market = markets[marketld]; 
(market.collateral, market.asset, market.oracle, market.oracleData) = (collateral_, 
asset_, oracle_, oracleData_); 
market.interestPerSecond = STARTING_INTEREST_ PER_SECOND; // 1% APR, with 1e18 
being 100% 


market.assetld = marketld; 


marketList.push(marketld); 


/// @notice Accrues the interest on the borrowed tokens. 
function accrue(uint256 marketld) public { 


Market storage market = markets[marketld]; 


// Number of seconds since accrue was called 
uint256 elapsedTime = block.timestamp - market.lastAccrued; 
if (elapsedTime == 0) { 
return; 
} 


market.lastAccrued = block.timestamp.to64(); 


if (market.totalBorrow.base == 0) { 
// \f there are no borrows, reset the interest rate 
if (market.interestPerSecond != STARTING _INTEREST PER SECOND) { 
market.interestPerSecond = STARTING_INTEREST PER_SECOND; 
emit LogAccrue(0, STARTING_INTEREST_ PER SECOND, 0); 
} 


return; 


uint256 extraAmount = 0; 


// Accrue interest 
extraAmount = (market.totalBorrow.elastic * market.interestPerSecond * elapsedTime) 
/1e18; 
market.totalBorrow.elastic += extraAmount.to128(); 
uint256 fullAssetAmount = _ yieldBox.toAmount(market.asset, 


yieldBox.totalSupply(marketld), false) + market.totalBorrow.elastic; 


// Update interest rate 
uint256 utilization = (market.totalBorrow.elastic * UTILIZATION PRECISION) / 
fullAssetAmount; 
if (utilization < MINIMUM_TARGET_ UTILIZATION) { 
uint256 underFactor = ((MINIMUM_TARGET_ UTILIZATION - utilization) * 
FACTOR_PRECISION) / MINIMUM_TARGET_UTILIZATION; 


uint256 scale = INTEREST ELASTICITY + (underFactor * underFactor * elapsedTime); 


market.interestPerSecond = ((market.interestPerSecond * INTEREST ELASTICITY) / 


scale).to64(); 


if (market.interestPerSecond < MINIMUM_INTEREST PER_SECOND) { 
market.interestPerSecond = MINIMUM_INTEREST_PER_SECOND; // 0.25% APR 
minimum 
} 
} else if (utilization > MAXIMUM_TARGET_UTILIZATION) { 
uint256 overFactor = ((utilization - MAXIMUM _TARGET_UTILIZATION) * 
FACTOR_PRECISION) / FULL_UTILIZATION_MINUS_ MAX; 
uint256 scale = INTEREST ELASTICITY + (overFactor * overFactor * elapsedTime); 
uint256 newlnterestPerSecond = (market.interestPerSecond * scale) / 
INTEREST ELASTICITY; 
if (newlnterestPerSecond > MAXIMUM_INTEREST_ PER SECOND) { 
newlnterestPerSecond = MAXIMUM_INTEREST_PER_SECOND; // 1000% APR 
maximum 
} 


market.interestPerSecond = newlnterestPerSecond.to64(); 


emit LogAccrue(extraAmount, market.interestPerSecond, utilization); 


/// @notice Concrete implementation of `isSolvent`. Includes a third parameter to allow 
caching `exchangeRate`. 


[Il @param _exchangeRate The exchange rate. Used to cache the `exchangeRate` 


between calls. 
function _isSolvent( 
uint256 marketld, 
address user, 
uint256 _exchangeRate 
) internal view returns (bool) { 


Market storage market = markets[marketld]; 


// accrue must have already been called! 

uint256 borrowPart = market.userBorrowPart[ user]; 

if (borrowPart == 0) return true; 

uint256 collateralShare = market.userCollateralShare[user]; 


if (collateralShare == QO) return false; 


return 
yieldBox.toAmount( 
market.collateral, 
((collateralShare * EXCHANGE _RATE_PRECISION) / 
COLLATERIZATION_RATE_PRECISION) * COLLATERIZATION_RATE, 
false 
) >= 
// Moved exchangeRate here instead of dividing the other side to preserve more 
precision 
(borrowPart * market.totalBorrow.elastic * _exchangeRate) / 
market.totalBorrow.base; 


} 


modifier solvent(uint256 marketld) { 


r 


// TODO 


/// @notice Gets the exchange rate. l.e how much collateral to buy 1e18 asset. 
/// This function is Supposed to be invoked if needed because Oracle queries can be 
expensive. 
/// @return updated True if ~“exchangeRate’ was updated. 
/// @return rate The new exchange rate. 
function updateExchangeRate(uint256 marketid) public returns (bool updated, uint256 
rate) { 


Market storage market = markets[marketld]; 


(updated, rate) = market.oracle.get(market.oracleData); 


if (updated) { 
market.exchangeRate = rate; 
emit LogExchangeRate(rate); 
} else { 
// Return the old rate if fetching wasn't successful 


rate = market.exchangeRate; 


/// @notice Adds ‘collateral’ from msg.sender to the account ‘to’. 
/// @param marketld The id of the market. 
/// @param to The receiver of the tokens. 
/// @param share The amount of shares to add for ‘to’. 
function addCollateral( 
uint256 marketld, 
address to, 
uint256 share 
) public { 


Market storage market = markets[marketld]; 


market.userCollateralShare[to] += share; 
market.totalCollateralShare += share; 
yieldBox.transfer(msg.sender, address(this), market.collateral, share); 


emit LogAddCollateral(msg.sender, to, share); 


/// @dev Concrete implementation of ~removeCollateral’. 
function removeCollateral( 

uint256 marketld, 

address to, 

uint256 share 
) internal { 


Market storage market = markets[marketld]; 


market.userCollateralShare[msg.sender] -= share; 


market.totalCollateralShare -= share; 
yieldBox.transfer(address(this), to, market.collateral, share); 


emit LogRemoveCollateral(msg.sender, to, share); 


/// @notice Removes ‘share’ amount of collateral and transfers it to 
/// @param to The receiver of the shares. 
/// @param share Amount of shares to remove. 
function removeCollateral( 
uint256 marketld, 
address to, 
uint256 share 
) public solvent(marketld) { 
// accrue must be called because we check solvency 
accrue(marketld); 


_removeCollateral(marketld, to, share); 


/// @dev Concrete implementation of `addAsset`. 
function _addAsset( 

uint256 marketld, 

address to, 

uint256 share 
) internal returns (uint256 fraction) { 


Market storage market = markets[marketld]; 


‘to’. 


uint256 allShare = yieldBox.totalSupply(marketlid) + yieldBox.toShare(market.asset, 
market.totalBorrow.elastic, true); 
fraction = allShare == 0 ? share : (share * yieldBox.totalSupply(marketld)) / allShare; 
if (yieldBox.totalSupply(marketld) + fraction < 1000) { 
return O0; 
} 
yieldBox.mint(marketld, to, share); 
yieldBox.transfer(msg.sender, to, marketld, share); 


emit LogAddAsset(msg.sender, to, share, fraction); 


//1 @notice Adds assets to the lending pair. 
/// @param to The address of the user to receive the assets. 
/// @param share The amount of shares to add. 
/// @return fraction Total fractions added. 
function addAsset( 
uint256 marketld, 
address to, 
uint256 share 
) public returns (uint256 fraction) { 
accrue(marketld); 


fraction = _addAsset(marketld, to, share); 


/// @dev Concrete implementation of ~removeAsset’. 


function removeAsset( 


uint256 marketld, 
address to, 
uint256 fraction 
) internal returns (uint256 share) { 


Market storage market = markets[marketld]; 


uint256 allShare = yieldBox.totalSupply(marketlid) + yieldBox.toShare(market.asset, 
market.totalBorrow.elastic, true); 
share = (fraction * allShare) / yieldBox.totalSupply(marketld); 
yieldBox.burn(marketld, msg.sender, fraction); 
require(yieldBox.totalSupply(marketld) >= 1000, "Kashi: below minimum"); 
emit LogRemoveAsset(msg.sender, to, share, fraction); 


yieldBox.transfer(address(this), to, marketld, share); 


/// @notice Removes an asset from msg.sender and transfers it to ‘to’. 
/// @param to The user that receives the removed assets. 
/// @param fraction The amount/fraction of assets held to remove. 
/// @return share The amount of shares transferred to ‘to’. 
function removeAsset( 
uint256 marketld, 
address to, 
uint256 fraction 
) public returns (uint256 share) { 
accrue(marketld); 


share = _removeAsset(marketld, to, fraction); 


/// @dev Concrete implementation of `borrow`. 
function _borrow( 

uint256 marketld, 

address to, 

uint256 amount 
) internal returns (uint256 part, uint256 share) { 


Market storage market = markets[marketld]; 


(market.totalBorrow, part) = market.totalBorrow.add(amount, true); 
market.userBorrowPart[msg.sender] += part; 


emit LogBorrow(msg.sender, to, amount, part); 


share = yieldBox.toShare(market.asset, amount, false); 
require(yieldBox.totalSupply(marketld) >= 1000, "Kashi: below minimum"); 
market.totalAssetShares -= share; 


yieldBox.transfer(address(this), to, market.asset, share); 


/// @notice Sender borrows ‘amount’ and transfers it to ‘to’. 
/// @return part Total part of the debt held by borrowers. 
/// @return share Total amount in shares borrowed. 
function borrow( 
uint256 marketld, 


address to, 


uint256 amount 

) public solvent(marketld) returns (uint256 part, uint256 share) { 
updateExchangeRate(marketld); 
accrue(marketld); 


(part, share) = _borrow(marketld, to, amount); 


/// @dev Concrete implementation of “repay. 
function repay( 

uint256 marketld, 

address to, 

uint256 part 
) internal returns (uint256 amount) { 


Market storage market = markets[marketld]; 


(market.totalBorrow, amount) = market.totalBorrow.sub(part, true); 


market.userBorrowPart[to] -= part; 


uint256 share = yieldBox.toShare(market.asset, amount, true); 
yieldBox.transfer(msg.sender, address(this), market.asset, share); 
market.totalAssetShares += share; 


emit LogRepay(msg.sender, to, amount, part); 


/// @notice Repays a loan. 


/// @param to Address of the user this payment should go. 


/// @param part The amount to repay. See “userBorrowPart’. 
/// @return amount The total amount repayed. 
function repay( 
uint256 marketld, 
address to, 
uint256 part 
) public returns (uint256 amount) { 
accrue(marketld); 


amount = _repay(marketld, to, part); 


/// @notice Handles the liquidation of users' balances, once the users' amount of collateral 
is too low. 
/// @param user The user to liquidate. 
/// @param maxBorrowPart Maximum (partial) borrow amounts to liquidate. 
/// @param to Address of the receiver if “swapper’ is zero. 
[I| @param swapper Contract address of the “ISwapper’ implementation. 
function liquidate( 
uint256 marketld, 
address user, 
uint256 maxBorrowPart, 
address to, 
ISwapper swapper 
) public { 


Market storage market = markets[marketld]; 


// Oracle can fail but we still need to allow liquidations 
(, uint256 _exchangeRate) = updateExchangeRate(marketld); 
accrue(marketld); 


require(!_isSolvent(marketld, user, exchangeRate), "Lending: user solvent"); 


uint256 availableBorrowPart = market.userBorrowPart[ user]; 
uint256 borrowPart = maxBorrowPart > availableBorrowPart ? availableBorrowPart : 
maxBorrowPart; 
market.userBorrowPart[user] = availableBorrowPart - borrowPart; 
uint256 borrowAmount = market.totalBorrow.toElastic(borrowPart, false); 
uint256 collateralShare = yieldBox.toShare( 
market.collateral, 
((borrowAmount * LIQUIDATION MULTIPLIER * _exchangeRate) / 
LIQUIDATION MULTIPLIER_PRECISION) * EXCHANGE _ RATE PRECISION, 


false 


market.userCollateralShare[user] -= collateralShare; 
emit LogRemoveCollateral(user, swapper == ISwapper(address(0)) ? to 
address(Sswapper), collateralShare); 
emit LogRepay(swapper == ISwapper(address(0)) ? msg.sender : address(Swapper), 


user, borrowAmount, borrowPart); 


market.totalBorrow.elastic -= borrowAmount.to128(); 
market.totalBorrow.base -= borrowPart.to128(); 


market.totalCollateralShare -= collateralShare; 


uint256 borrowShare = yieldBox.toShare(market.asset, borrowAmount, true); 


// Flash liquidation: get proceeds first and provide the borrow after 
yieldBox.transfer(address(this), swapper == ISwapper(address(0)) ? to 
address(Swapper), market.collateral, collateralShare); 
if (Swapper != ISwapper(address(0))) { 
Swapper.swap(market.collateral, market.asset, msg.sender, borrowShare, 
collateralShare); 


} 


yieldBox.transfer(msg.sender, address(this), market.asset, borrowShare); 


market.totalAssetShares += borrowShare; 


emit LogLiquidate(marketlid, user, borrowPart, to, swapper); 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\strategies/BaseBufferStrategy.sol---- 
// SPDX-License-Identifier: MIT 
pragma solidity *0.8.9; 


pragma experimental ABIEncoderV2; 


import "@boringcrypto/boring-solidity/contracts/interfaces/IERC20.sol"; 
import "@boringcrypto/boring-solidity/contracts/libraries/BoringERC20.sol"; 
import "../BoringMath.sol"; 

import "../enums/YieldBoxTokenType.sol"; 


import "../interfaces/IStrategy.sol"; 


// solhint-disable const-name-snakecase 


// solhint-disable no-empty-blocks 


abstract contract BaseBufferStrategy is IStrategy { 


using BoringMath for uint256; 


lYieldBox public immutable yieldBox; 


constructor(lYieldBox _yieldBox) { 


yieldBox = _yieldBox; 


uint256 public constant MAX_RESERVE_PERCENT = 10e18; 


uint256 public constant TARGET _RESERVE_PERCENT = 5e18; 


// Implemented by base strategies for token type 


function reserve() internal view virtual returns (uint256 amount); 


function transfer(address to, uint256 amount) internal virtual; 


// Implemented by strategy 


function balancelnvested() internal view virtual returns (uint256 amount); 


function _invest(uint256 amount) internal virtual; 


function _divestAll() internal virtual; 


function _divest(uint256 amount) internal virtual; 


function currentBalance() public view override returns (uint256 amount) { 


return _reserve() + _balancelnvested(); 


function withdrawable() external view override returns (uint256 amount) { 


return _reserve() + _balancelnvested(); 


function cheapWithdrawable() external view override returns (uint256 amount) { 


return _reserve(); 


/// \s called by YieldBox to signal funds have been added, the strategy may choose to act 
on this 

/// When a large enough deposit is made, this should trigger the strategy to invest into the 
actual 

/// strategy. This function should normally NOT be used to invest on each call as that 

would be costly 

/// for small deposits. 

/// Only accept this call from the YieldBox 

function deposited(uint256) public override { 


require(msg.sender == address(yieldBox), "Not YieldBox"); 


uint256 balance = _balancelnvested(); 


uint256 reserve = _reserve(); 


// Get the size of the reserve in % (1e18 based) 


uint256 reservePercent = (reserve * 100e18) / (balance + reserve); 


// Check if the reserve is too large, if so invest it 
if (reservePercent > MAX_RESERVE_PERCENT) { 


_invest(balance.muldiv(reservePercent - TARGET RESERVE PERCENT, 100e18, 


false)); 


/// \s called by the YieldBox to ask the strategy to withdraw to the user 


/// When a strategy keeps a little reserve for cheap withdrawals and the requested 


withdrawal goes over this amount, 

/// the strategy should divest enough from the strategy to complete the withdrawal and 
rebalance the reserve. 

/// Only accept this call from the YieldBox 

function withdraw(address to, uint256 amount) public override { 


require(msg.sender == address(yieldBox), "Not YieldBox"); 


uint256 balance = _balancelnvested(); 


uint256 reserve = _reserve(); 


if (reserve < amount) { 
if (balance + reserve == amount) { 
_divestAll(); 
_transfer(to, reserve()); 
} else { 
_divest(balance - (balance + reserve - 
amount).muldiv(TARGET_ RESERVE PERCENT, 100e18, false)); 


_transfer(to, amount); 


abstract contract BaseERC20BufferStrategy is BaseBufferStrategy { 


using BoringERC20 for IERC20; 


TokenType public constant tokenType = TokenType.ERC20; 


uint256 public constant tokenld = 0; 


address public immutable contractAddress; 


constructor(lYieldBox _yieldBox, address _contractAddress) BaseBufferStrategy(_yieldBox) 


contractAddress = _contractAddress; 


function _reserve() internal view override returns (uint256 amount) { 


return IERC20(contractAddress).safeBalanceOf(address(this)); 


function _transfer(address to, uint256 amount) internal override { 


IERC20(contractAddress).safeTransfer(to, amount); 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\strategies/BaseStrategy.sol---- 
// SPDX-License-Identifier: MIT 
pragma solidity *0.8.9; 


pragma experimental ABIEncoderV2; 


import "@boringcrypto/boring-solidity/contracts/interfaces/IERC20.sol"; 
import "@boringcrypto/boring-solidity/contracts/libraries/BoringERC20.sol"; 
import "../enums/YieldBoxTokenType.sol"; 


import "../interfaces/IStrategy.sol"; 


// solhint-disable const-name-snakecase 


// solhint-disable no-empty-blocks 


abstract contract BaseStrategy is IStrategy { 


lYieldBox public immutable yieldBox; 


constructor(lYieldBox _yieldBox) { 


yieldBox = _yieldBox; 


function currentBalance() internal view virtual returns (uint256 amount); 


function currentBalance() public view virtual returns (uint256 amount) { 


return _currentBalance(); 


function withdrawable() external view virtual returns (uint256 amount) { 


return _currentBalance(); 


function cheapWithdrawable() external view virtual returns (uint256 amount) { 


return _currentBalance(); 


function deposited(uint256 amount) internal virtual; 


function deposited(uint256 amount) external { 
require(msg.sender == address(yieldBox), "Not YieldBox"); 


_deposited(amount); 


function withdraw(address to, uint256 amount) internal virtual; 


function withdraw(address to, uint256 amount) external { 
require(msg.sender == address(yieldBox), "Not YieldBox"); 


_withdraw(to, amount); 


abstract contract BaseERC20Strategy is BaseStrategy { 
TokenType public constant tokenType = TokenType.ERC20; 


uint256 public constant tokenld = 0; 


address public immutable contractAddress; 


constructor(lYieldBox _yieldBox, address contractAddress) BaseStrategy(_yieldBox) { 


contractAddress = _contractAddress; 


abstract contract BaseERC1155Strategy is BaseStrategy { 
TokenType public constant tokenType = TokenType.ERC1155; 
uint256 public immutable tokenld; 


address public immutable contractAddress; 


constructor(lYieldBox _yieldBox, address _contractAddress, uint256 
BaseStrategy(_yieldBox) { 
contractAddress = _contractAddress; 


tokenld = _tokenld; 


_tokenld) 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\strategies/ERC20WithoutStrategy.sol---- 


// SPDX-License-lIdentifier: MIT 
pragma solidity *0.8.9; 


pragma experimental ABIEncoderV2; 


import "@boringcrypto/boring-solidity/contracts/interfaces/IERC20.sol"; 


import "@boringcrypto/boring-solidity/contracts/libraries/BoringERC20.sol"; 


import "../enums/YieldBoxTokenType.sol"; 
import "../BoringMath.sol"; 


import "./BaseStrategy.sol"; 


// solhint-disable const-name-snakecase 


// solhint-disable no-empty-blocks 


contract ERC20WithoutStrategy is BaseERC20Strategy { 


using BoringERC20 for IERC20; 


constructor(lYieldBox _yieldBox, IERC20 token) 


address(token)) {} 


string public constant override name = "No strategy"; 


string public constant override description = "No strategy"; 


BaseERC20Strategy(_yieldBox, 


function currentBalance() internal view override returns (uint256 amount) { 


return IERC20(contractAddress).safeBalanceOf(address(this)); 


function deposited(uint256 amount) internal override {} 


function _withdraw(address to, uint256 amount) internal override { 


IERC20(contractAddress).safeTransfer(to, amount); 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\strategies/SushiStakingBufferStrategy.so 
[aves 

// SPDX-License-lIdentifier: MIT 

pragma solidity *0.8.9; 


pragma experimental ABIEncoderV2; 


import "@boringcrypto/boring-solidity/contracts/interfaces/IERC20.sol"; 
import "@boringcrypto/boring-solidity/contracts/libraries/BoringERC20.sol"; 
import "../enums/YieldBoxTokenType.sol"; 


import "./BaseBufferStrategy.sol"; 


// solhint-disable const-name-snakecase 


// solhint-disable no-empty-blocks 


interface ISushiBar is IERC20 { 


function enter(uint256 amount) external; 


function leave(uint256 share) external; 


contract SushiStakingBufferStrategy is BaseERC20BufferStrategy { 


using BoringMath for uint256; 


using BoringERC20 for IERC20; 


using BoringERC20 for ISushiBar; 


constructor(lYieldBox _yieldBox) BaseERC20BufferStrategy(_yieldBox, address(sushi)) {} 


string public constant override name = "xSUSHI-Buffered"; 
string public constant override description = "Stakes SUSHI into the SushiBar for xSushi 


with a buffer"; 


IERC20 private constant sushi 
IERC20(0x6B3595068778DD592e39A122f4f5a5cFO9C9O0FE2); 
ISushiBar private constant sushiBar = 


ISushiBar(0x8798249c2E607446EfB7Ad49eC89dD1865Ff4272); 


uint256 private _balance; 


function balancelnvested() internal view override returns (uint256 amount) { 
uint256 sushilnBar = sushi.safeBalanceOf(address(sushiBar)); 
uint256 xSushiBalance = sushiBar.safeBalanceOf(address(this)); 


return xSushiBalance.muldiv(sushilnBar, sushiBar.safeTotalSupply(), false); 


function _invest(uint256 amount) internal override { 


sushiBar.enter(amount); 


function divestAll() internal override { 


sushiBar.leave(sushiBar.balanceOf(address(this))); 


function divest(uint256 amount) internal override { 


uint256 totalShares = sushiBar.totalSupply(); 


uint256 totalSushi = sushi.balanceOf(address(sushiBar)); 


uint256 shares = (amount * totalShares) / totalSushi; 


sushiBar.leave(shares); 


----- E:/Train/makePDF/v1\YieldBox-master\contracts\strategies/SushiStakingSimpleStrategy.s 
ol---- 

// SPDX-License-Identifier: MIT 

pragma solidity *0.8.9; 


pragma experimental ABIEncoderV2; 


import "@boringcrypto/boring-solidity/contracts/interfaces/IERC20.sol"; 
import "@boringcrypto/boring-solidity/contracts/libraries/BoringERC20.sol"; 
import "../enums/YieldBoxTokenType.sol"; 

import "../BoringMath.sol"; 


import "./BaseStrategy.sol"; 


// solhint-disable const-name-snakecase 


// solhint-disable no-empty-blocks 


interface ISushiBar is IERC20 { 


function enter(uint256 amount) external; 


function leave(uint256 share) external; 


contract SushiStakingStrategy is BaseERC20Strategy { 
using BoringERC20 for IERC20; 
using BoringERC20 for ISushiBar; 


using BoringMath for uint256; 


constructor(lYieldBox _yieldBox) BaseERC20Strategy(_yieldBox, address(sushi)) {} 


string public constant override name = "xSUSHI"; 


string public constant override description = "Stakes SUSHI into the SushiBar for xSushi"; 


IERC20 private constant sushi 
IERC20(0x6B3595068778DD592e39A122f4f5a5cFO9C9O0FE2); 
ISushiBar private constant sushiBar = 


ISushiBar(0x8798249c2E607446EfB7Ad49eC89dD1865Ff4272); 


function currentBalance() internal view override returns (uint256 amount) { 
uint256 sushiBalance = sushi.safeBalanceOf(address(this)); 
uint256 sushilnBar = sushi.safeBalanceOf(address(sushiBar)); 
uint256 xSushiBalance = sushiBar.safeBalanceOf(address(this)); 
return sushiBalance + xSushiBalance.muldiv(sushilnBar, sushiBar.safeTotalSupply(), 
false); 


} 


function deposited(uint256 amount) internal override { 


sushiBar.enter(amount); 


function _withdraw(address to, uint256 amount) internal override { 
uint256 totalSushi = sushi.safeBalanceOf(address(sushiBar)); 


uint256 totalxSushi = sushiBar.safeTotalSupply(); 


sushiBar.leave(amount.muldiv(totalxSushi, totalSushi, true)); 


sushi.safeTransfer(to, amount); 


